CVE-2023-22021

Summary

CVE-2023-22021 is a vulnerability affecting the Oracle Business Intelligence Enterprise Edition's Analytics Server component (versions 6.4.0.0.0 and 7.0.0.0.0). This issue allows a low-privileged attacker with network access to exploit it via HTTP, leading to a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. The impact level is rated as medium (CVSS Base Score 4.3) in terms of availability. Attackers can cause this easily exploitable vulnerability to disrupt the availability of the Oracle Business Intelligence Enterprise Edition system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.