CVE-2023-22027: Medium severity oracle business intelligence enterprise edition vulnerability

Published Jul 18, 2023

Updated

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

Affected Software

1 affected component

Oracle Business Intelligence=7.0.0.0.0

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpujul2023.html

Event History

Jul 18, 2023

CVE Published

via MITRE·08:18 PM

Data Sourced

via MITRE·08:18 PM

DescriptionSeverity

Data Sourced

09:15 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID for the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics?

The vulnerability ID is CVE-2023-22027.

What is the affected version of the Oracle Business Intelligence Enterprise Edition product?

The affected version is 7.0.0.0.0.

What is the severity level of CVE-2023-22027?

The severity level of CVE-2023-22027 is medium.

How can a low privileged attacker exploit this vulnerability?

A low privileged attacker with network access via HTTP can easily exploit this vulnerability.

Where can I find more information about CVE-2023-22027?

You can find more information about CVE-2023-22027 on Oracle's Security Alerts page: https://www.oracle.com/security-alerts/cpujul2023.html