Oracle BI Publisher Web Server Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in Oracle BI Publisher, part of Oracle Analytics, specifically in the Web Server component. The issue affects versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Exploitation of this vulnerability could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible through Oracle BI Publisher.

Impact

Exploitation allows for unauthorized access to critical data and the ability to create, delete, or modify all data accessible in Oracle BI Publisher.