Oracle Business Intelligence Enterprise Edition vulnerabilities

Vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics Cloud component) affects versions 7.6.0.0.0 and 8.2.0.0.0. A low-privileged attacker with local access to the infrastructure can exploit this flaw to unauthorizedly create, delete, or modify data, as well as gain complete access to data.

A vulnerability in the Oracle Business Intelligence Enterprise Edition component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.

An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. A low privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure to compromise Oracle Business Intelligence Enterprise Edition.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A high-privileged attacker with network access via HTTP can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of data. Attacks may impact additional products (scope change). CVSS 7.1 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (version 26.01.0.0.0). A difficult-to-exploit flaw requires logon to the infrastructure, user interaction, and may impact additional products (scope change). A low-privileged attacker can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.5 (Confidentiality, Integrity, and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can take over the system. CVSS 3.1 Base Score 7.2.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Actions component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify data. CVSS 3.1 Base Score 8.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Installation component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with logon to the infrastructure can take over the system. CVSS 3.1 Base Score 7.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting version 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.0.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit, but an unauthenticated attacker can, via HTTP, gain unauthorized access to create, delete or modify critical data or all OBIEE data, as well as full access to data and cause partial DoS. Attacks may impact additional products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Service Administration UI) affecting version 12.2.1.4.0. It is easily exploitable by a low privileged attacker with network access via HTTP, resulting in takeover of the product.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affecting version 12.2.1.4.0. It is difficult to exploit and allows an unauthenticated attacker with network access via HTTP to take over the product.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with logon to the infrastructure where the product executes can compromise it if a victim performs a specific interaction. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (FNDN component) affecting version 12.2.1.4.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can easily gain unauthorized access to critical data or all data accessible in the product. The vulnerability may significantly impact additional products (scope change, CVSS 7.7).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can compromise the system. The vulnerability is difficult to exploit but results in full takeover.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can modify, delete, or access critical data and cause partial denial of service. The vulnerability is easily exploitable.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can compromise the system. The vulnerability is easily exploitable.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows low privileged attacker with local access to take over the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can exploit this, potentially leading to takeover of the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Server). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to access all data. CVSS 7.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Difficult to exploit, allows low-privileged attacker with local access to take over system. CVSS 7.0.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects version 12.2.1.4.0. A low-privileged attacker via HTTP can easily compromise confidentiality, integrity, and availability of data, including critical data, and cause partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) affects version 12.2.1.4.0. A low-privileged attacker with local access to the infrastructure, with user interaction, can take over the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP can easily gain unauthorized access to critical data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Search) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can via HTTP gain unauthorized access to critical data or all data accessible in the product. Attacks may impact additional products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affects version 12.2.1.4.0. A low-privileged attacker can via HTTP take over the product. The vulnerability has a high CVSS score of 8.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web Administration component) affects versions 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable by high privileged attacker with network access via HTTP, requires user interaction, and may impact additional products (scope change). CVSS 8.4.