CVE Vulnerability Catalog

Vulnerability in Oracle BI Publisher (component: BI Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. It is easily exploitable by a low privileged attacker with network access via LDAP, leading to unauthorized creation, deletion or modification of data and unauthorized access to critical data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with logon to the infrastructure where the product executes can compromise it if a victim performs a specific interaction. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (FNDN component) affecting version 12.2.1.4.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can easily gain unauthorized access to critical data or all data accessible in the product. The vulnerability may significantly impact additional products (scope change, CVSS 7.7).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can compromise the system. The vulnerability is difficult to exploit but results in full takeover.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can modify, delete, or access critical data and cause partial denial of service. The vulnerability is easily exploitable.

Vulnerability in Oracle BI Publisher (BI Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via SOAP can cause a hang or frequently repeatable crash (complete DOS) and modify and read some data. The vulnerability is easily exploitable.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. A low privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webserver component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.

Vulnerability in Oracle Fusion Middleware Helidon product (helidon-webserver-http2 component) affects versions 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP/2 can cause a hang or frequently repeatable crash (complete DOS). The vulnerability is easily exploitable.

Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in the Helidon product (component: helidon-integrations-neo4j), affecting versions 3.0.0-3.2.20 and 4.0.0-4.5.4. A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to data.