Oracle Bi Publisher
Monthly
Full compromise of Oracle BI Publisher (part of Oracle Analytics, BI Platform Security component) is achievable by a remote, unauthenticated attacker sending crafted HTTP requests, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N scoring 9.8. Affected releases are the 8.2.0.0.0 and 12.2.1.4.0 versions, and Oracle rates successful attacks as resulting in complete takeover of the BI Publisher instance with high confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis and no CISA KEV listing, so risk is currently driven by the ease and severity of the flaw rather than confirmed active exploitation.
Full compromise of Oracle BI Publisher (part of Oracle Analytics, BI Platform Security component) is achievable by a remote, unauthenticated attacker sending crafted HTTP requests, per the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N scoring 9.8. Affected releases are the 8.2.0.0.0 and 12.2.1.4.0 versions, and Oracle rates successful attacks as resulting in complete takeover of the BI Publisher instance with high confidentiality, integrity and availability impact. There is no public exploit identified at time of analysis and no CISA KEV listing, so risk is currently driven by the ease and severity of the flaw rather than confirmed active exploitation.