Oracle Business Intelligence Enterprise Edition (OAS) (Apr 2023 CPU)

The versions of Oracle Business Intelligence Enterprise Edition OBIEE OAS installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics componen...

Oracle Business Intelligence Publisher 12.2.1.4.0 < 12.2.1.4.230407 (April 2023 CPU)

The versions of Oracle Business Intelligence Publiosher installed on the remote host is affected by a vulnerability as referenced in the April 2023 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are...

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

WordPress Google Analytics Top Content Widget Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software Google Analytics Top Content Widget Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2015-10101 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 218b418ba3dd Credits...

CVE-2023-21965

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-21965

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-21952

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-21952

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-21910

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-21970

The CVE-2023-21970 vulnerability affects Oracle BI Publisher (Oracle Analytics) with component Security, version 6.4.0.0.0. It is exploitable over HTTP by a low-privileged attacker and requires user interaction; successful exploitation can grant unauthorized access to Oracle BI Publisher data. CV...

CVE-2023-21965

Oracle Business Intelligence Enterprise Edition (OBIEE/OAS) 6.4.0.0.0 is affected by CVE-2023-21965 in the Analytics Server component. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise OBIEE and potentially access all accessible data; successful attacks ...

CVE-2023-21952

CVE-2023-21952 affects Oracle Business Intelligence Enterprise Edition (OBIEE) / Oracle Analytics with the Analytics Server component. Affected version: 6.4.0.0.0. The issue allows a low-privilege attacker who can access the server over HTTP from the network to compromise OBIEE, requiring human i...

CVE-2023-21941

CVE-2023-21941 affects Oracle BI Publisher (Oracle Analytics) Web Server component. Affected versions are 6.4.0.0.0 and 12.2.1.4.0. The vulnerability allows a low-privilege, network-accessing attacker over HTTP to obtain unauthorized read access to a subset of Oracle BI Publisher data. CVSS 3.1 b...

CVE-2023-21910

Oracle OBIEE (Analytics Web General) is affected by CVE-2023-21910 in versions 6.4.0.0.0 and 12.2.1.4.0. The issue stems from insufficient input validation in Analytics Web General, allowing a remote attacker over HTTP with low privileges to access sensitive data. Remediation guidance from the co...

Oracle BI Publisher 安全漏洞

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher version 6.4.0.0.0 for Oracle Analytics. An...

PT-2023-2495 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 6.4.0.0.0 Description: The issue exists due to insufficient input validation in the Analytics Server component of Oracle Business Intelligence Enterprise Edition. This allows a remote...

CVE-2015-10101

A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is an unknown functionality of the file class-tgm-plugin-activation.php. The manipulation leads to cross site scripting. The attack can be...

Cross site scripting

A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is an unknown functionality of the file class-tgm-plugin-activation.php. The manipulation leads to cross site scripting. The attack can be...