Oracle Business Intelligence Enterprise Edition vulnerabilities

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Search component) affects version 12.2.1.4.0. A low-privileged authenticated attacker with network access via HTTP can modify, delete, or access critical data and cause partial denial of service. The vulnerability is easily exploitable.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) affects version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can compromise the system. The vulnerability is easily exploitable.

Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows low privileged attacker with local access to take over the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can exploit this, potentially leading to takeover of the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Server). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to access all data. CVSS 7.5.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Difficult to exploit, allows low-privileged attacker with local access to take over system. CVSS 7.0.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects version 12.2.1.4.0. A low-privileged attacker via HTTP can easily compromise confidentiality, integrity, and availability of data, including critical data, and cause partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) affects version 12.2.1.4.0. A low-privileged attacker with local access to the infrastructure, with user interaction, can take over the system.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP can easily gain unauthorized access to critical data.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Search) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can via HTTP gain unauthorized access to critical data or all data accessible in the product. Attacks may impact additional products (scope change).

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affects version 12.2.1.4.0. A low-privileged attacker can via HTTP take over the product. The vulnerability has a high CVSS score of 8.8.

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.

Vulnerability in Oracle Business Intelligence Enterprise Edition (Analytics Web Administration component) affects versions 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable by high privileged attacker with network access via HTTP, requires user interaction, and may impact additional products (scope change). CVSS 8.4.