Aller au contenu
Se connecter
Non notée

CVE-2019-2605 Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware…

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Web Catalog). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
Business Intelligence Enterprise Edition 12.2 12.2.1.3.0 → 12.2.1.4.0 Pas de correctif indiqué
Business Intelligence Enterprise Edition 11.1.1.9.0 Pas de correctif indiqué

Autres CVE de Business Intelligence Enterprise Edition

Les 47 CVE de Business Intelligence Enterprise Edition →
CVE-2024-21139 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics… 5.4 Moyenne CVE-2024-21099 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data… 4.3 Moyenne CVE-2024-21064 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics… 5.4 Moyenne CVE-2024-21001 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform… 5.4 Moyenne
Suivre cette CVE