Oracle BI Publisher Web Service API Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the Oracle BI Publisher component of Oracle Analytics, specifically in versions 7.6.0.0.0 and 8.2.0.0.0. This vulnerability, which resides in the Web Service API, is easily exploitable by low-privileged attackers with network access via HTTP. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle BI Publisher.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or complete access to all data within Oracle BI Publisher that is accessible to the user.