CVE-2016-0468: Medium severity oracle business intelligence enterprise edition vulnerability

Published Apr 21, 2016

Updated

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.

Affected Software

3 affected components

ORACLE Business Intelligence=11.1.1.7.0

ORACLE Business Intelligence=11.1.1.9.0

ORACLE Business Intelligence=12.2.1.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Event History

Apr 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0468?

CVE-2016-0468 has been classified with a moderate severity level due to its impact on the confidentiality and integrity of affected systems.

How do I fix CVE-2016-0468?

To fix CVE-2016-0468, it is recommended to apply the latest security patches provided by Oracle for your version of Business Intelligence Enterprise Edition.

What versions are affected by CVE-2016-0468?

CVE-2016-0468 affects Oracle Business Intelligence Enterprise Edition versions 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0.

Who can exploit CVE-2016-0468?

CVE-2016-0468 can be exploited by remote authenticated users who have access to the affected Oracle Business Intelligence systems.

What are the potential impacts of CVE-2016-0468?

The potential impacts of CVE-2016-0468 include unauthorized access to sensitive data and the ability to alter data integrity within the affected systems.