Oracle Business Intelligence Enterprise Edition vulnerabilities

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Analytics Server) of Oracle Analytics, affecting versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics Cloud component) affects versions 7.6.0.0.0 and 8.2.0.0.0. A low-privileged attacker with local access to the infrastructure can exploit this flaw to unauthorizedly create, delete, or modify data, as well as gain complete access to data.

A vulnerability in the Oracle Business Intelligence Enterprise Edition component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.

An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web Administration component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A high-privileged attacker with HTTP network access can take over the product, and attacks may significantly impact additional products (scope change).

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. A low privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affects versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Visual Analyzer component) affects version 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Majel Mobile Service component) affects versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A difficult-to-exploit attack from the physical network segment adjacent to the host allows an unauthenticated attacker to take over the system, potentially impacting other products.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects versions 8.2.0.0.0 and 12.2.1.4.0. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data, requiring user interaction.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affects version 12.2.1.4.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert or delete access and read access to a subset of data, with scope change potentially impacting other products.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affecting version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized access to critical data. CVSS 6.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Foundation component) affecting version 12.2.1.4.0. A difficult-to-exploit local attack allows a low-privileged attacker logged on to the infrastructure to take over the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0) allows an unauthenticated attacker with logon to the infrastructure to take over the application, requiring user interaction. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0) allows an unauthenticated attacker with network access via HTTP to take over the application, though exploitation is difficult. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0) allows an unauthenticated attacker with logon to the infrastructure to take over the application, requiring user interaction. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0) allows a low-privileged attacker with logon to the infrastructure to take over the application. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allows a low-privileged attacker with network access via HTTP to take over the application. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) allows an unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (DoS) and unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Foundation component) affecting version 12.2.1.4.0. A low-privileged attacker with network access via HTTP can easily cause a partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can, with user interaction, perform unauthorized modification or read of data, with possible impact on additional products.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Server component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over the system.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure to compromise Oracle Business Intelligence Enterprise Edition.

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A high-privileged attacker with network access via HTTP can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of data. Attacks may impact additional products (scope change). CVSS 7.1 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (version 26.01.0.0.0). A difficult-to-exploit flaw requires logon to the infrastructure, user interaction, and may impact additional products (scope change). A low-privileged attacker can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.5 (Confidentiality, Integrity, and Availability impacts).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A high privileged attacker with network access via HTTP can take over the system. CVSS 3.1 Base Score 7.2.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Actions component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify data. CVSS 3.1 Base Score 8.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Installation component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low privileged attacker with logon to the infrastructure can take over the system. CVSS 3.1 Base Score 7.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting version 26.01.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.0.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit, but an unauthenticated attacker can, via HTTP, gain unauthorized access to create, delete or modify critical data or all OBIEE data, as well as full access to data and cause partial DoS. Attacks may impact additional products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Service Administration UI) affecting version 12.2.1.4.0. It is easily exploitable by a low privileged attacker with network access via HTTP, resulting in takeover of the product.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) affecting version 12.2.1.4.0. It is difficult to exploit and allows an unauthenticated attacker with network access via HTTP to take over the product.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An unauthenticated attacker with logon to the infrastructure where the product executes can compromise it if a victim performs a specific interaction. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (FNDN component) affecting version 12.2.1.4.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with network access via HTTP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web General component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can compromise the product. The vulnerability is difficult to exploit but results in full takeover (CVSS 7.5).

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with logon to the infrastructure can easily compromise the product. It results in full takeover (CVSS 7.8).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Presentation Services component) affecting versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. A low-privileged attacker with network access via SOAP can easily gain unauthorized access to critical data or all data accessible in the product. The vulnerability may significantly impact additional products (scope change, CVSS 7.7).

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can compromise the system. The vulnerability is difficult to exploit but results in full takeover.