CVE-2024-21099: Medium severity oracle business intelligence enterprise edition vulnerability
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization). The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21099?
CVE-2024-21099 is classified as an easily exploitable vulnerability that poses a significant risk to Oracle Business Intelligence Enterprise Edition 7.0.0.0.0.
How do I fix CVE-2024-21099?
To fix CVE-2024-21099, upgrade to the latest version of Oracle Business Intelligence Enterprise Edition as specified by Oracle updates.
Who is affected by CVE-2024-21099?
CVE-2024-21099 affects users of Oracle Business Intelligence Enterprise Edition version 7.0.0.0.0.
What type of attacks can CVE-2024-21099 facilitate?
CVE-2024-21099 can allow low privileged attackers with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.
What component of Oracle Analytics does CVE-2024-21099 impact?
CVE-2024-21099 impacts the Data Visualization component of Oracle Business Intelligence Enterprise Edition.