Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vec
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Oracle
- Product
- oracle
- CVSS
- 7.5
- EPSS
- 0.004 (p34)
- Exposure class
- Web platform
Why it ranks 21 (Routine)
- CVSS 7.5 high
- Product class: web platform
- Widely deployed vendor product (Oracle)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.