漏洞标题
N/A
漏洞描述信息
Oracle Fusion Middleware 企业版产品中的 Oracle Business Intelligence Enterprise Edition 漏洞(组件：分析动作)。受影响的版本是 5.5.0.0.0, 12.2.1.3.0 和 12.2.1.4.0。容易利用的漏洞允许通过 HTTP 方式验证的未授权攻击者访问 Oracle Business Intelligence Enterprise Edition。成功的攻击需要非攻击者的人进行交互，尽管漏洞存在于 Oracle Business Intelligence Enterprise Edition，但攻击可能对该等其他产品产生重大影响。利用此漏洞的成功攻击可能导致未经授权的对 Oracle Business Intelligence Enterprise Edition 可访问数据的部分更新、插入或删除访问，以及未经授权的对 Oracle Business Intelligence Enterprise Edition 可访问数据的部分读访问，以及未经授权的能力导致 Oracle Business Intelligence Enterprise Edition 部分拒绝服务(部分DOS)。CVSS 3.1 基础得分为 7.1(安全性、完整性和可用性影响)。CVSS 矢量：(CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
漏洞类别
N/A
漏洞标题
Oracle Business Intelligence Enterprise Edition 安全漏洞
漏洞描述信息
Oracle Business Intelligence Enterprise Edition是美国甲骨文（Oracle）公司的一款智能商业分析软件。对企业数据进行可视化分析，从而辅助决策、降低总体拥有成本并提高整个组织的投资回报率。 Oracle Business Intelligence Enterprise Edition Analytics Actions 存在安全漏洞。以下产品及版本受到影响：5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0
CVSS信息
N/A
漏洞类别
其他