Oracle Business Intelligence Enterprise Edition Platform Security Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in Oracle Business Intelligence Enterprise Edition (OBIEE) within the Oracle Analytics product line, specifically in the Platform Security component. This vulnerability affects versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise OBIEE. Exploitation of this vulnerability requires human interaction from a third party. While the vulnerability resides in OBIEE, successful attacks could significantly impact other products, leading to a scope change. The vulnerability allows unauthorized users to read, update, insert, or delete certain accessible data within OBIEE.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete some data within Oracle Business Intelligence Enterprise Edition.