CVE-2017-10025: High severity oracle bi publisher vulnerability
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10025?
CVE-2017-10025 is considered to be easily exploitable, allowing unauthenticated attackers to compromise BI Publisher.
How do I fix CVE-2017-10025?
To fix CVE-2017-10025, you should apply the latest security patches from Oracle for BI Publisher version 11.1.1.7.0.
What component of Oracle Fusion Middleware does CVE-2017-10025 affect?
CVE-2017-10025 affects the BI Publisher component of Oracle Fusion Middleware.
Who can exploit CVE-2017-10025?
CVE-2017-10025 can be exploited by unauthenticated attackers with network access via HTTP.
Which version of BI Publisher is affected by CVE-2017-10025?
The affected version of BI Publisher by CVE-2017-10025 is 11.1.1.7.0.