CVE-2019-3012
First published: Wed Oct 16 2019(Updated: )
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Business Intelligence Enterprise Edition | =11.1.1.9.0 | |
| Oracle Business Intelligence Enterprise Edition | =12.2.1.3.0 | |
| Oracle Business Intelligence Enterprise Edition | =12.2.1.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-3012?
CVE-2019-3012 is considered an easily exploitable vulnerability that allows unauthenticated access to the Oracle Business Intelligence system.
How do I fix CVE-2019-3012?
To resolve CVE-2019-3012, it is recommended to apply the latest security patches provided by Oracle for the affected versions of Oracle Business Intelligence.
Which versions of Oracle Business Intelligence are affected by CVE-2019-3012?
The affected versions are 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 of the Oracle Business Intelligence Enterprise Edition.
Can CVE-2019-3012 be exploited remotely?
Yes, CVE-2019-3012 can be exploited remotely by an unauthenticated attacker with network access.
What component of Oracle Fusion Middleware is impacted by CVE-2019-3012?
CVE-2019-3012 impacts the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle business intelligence enterprise edition
- version/oracle business intelligence enterprise edition/11.1.1.9.0
- version/oracle business intelligence enterprise edition/12.2.1.3.0
- version/oracle business intelligence enterprise edition/12.2.1.4.0