CVE-2023-22013

Summary

CVE-2023-22013 is a vulnerability affecting Oracle Business Intelligence Enterprise Edition's Analytics Server component (versions 6.4.0.0.0 and 7.0.0.0.0). This issue allows a low-privileged attacker with network access to compromise the system via HTTP. The exploitation of this vulnerability can lead to unauthorized update, insert, or delete access to certain data. The Base Score of CVSS 3.1 for this issue is 4.3, with a focus on integrity impacts. This vulnerability poses a risk to Oracle Business Intelligence Enterprise Edition users if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.