CVE-2023-22013

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2023-22020

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2023-22012

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-22020

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2023-22061

CVE-2023-22061 affects Oracle Analytics’ Oracle BI Enterprise Edition (OBIEE) Visual Analyzer. Affected product/version: OBIEE 6.4.0.0.0. Vulnerability allows an attacker with network access over HTTP and low privileges to exploit, with user interaction, to compromise data: unauthorized update/in...

CVE-2023-22027

The CVE-2023-22027 entry concerns Oracle Analytics’ Oracle Business Intelligence Enterprise Edition (Analytics Server) with affected version 7.0.0.0.0. A low-privilege, network-accessible (HTTP) attacker can exploit this to cause a partial denial of service to Oracle BI EE, per the CVE descriptio...

CVE-2023-22020

CVE-2023-22020 concerns Oracle Analytics (Oracle BI Enterprise Edition) Analytics Server. Affected: Oracle BI Enterprise Edition 6.4.0.0.0 and 7.0.0.0.0. The flaw allows a low-privileged, unauthenticated (network) attacker over HTTP to perform unauthorized updates/deletes and unauthorized reads o...

CVE-2023-22013

CVE-2023-22013 affects Oracle Analytics BI Enterprise Edition Analytics Server in 6.4.0.0.0 and 7.0.0.0.0. A low-privileged, network-accessible attacker over HTTP can trigger unauthorized update/insert/delete of data due to the Analytics Server vulnerability (root cause: input validation issue). ...

CVE-2023-22012

CVE-2023-22012 affects Oracle Analytics’ Oracle BI Enterprise Edition (Analytics Server) with version 7.0.0.0.0. The vulnerability allows a low-privilege, unauthenticated (network) attacker with HTTP access to perform unauthorized updates/inserts/deletes on accessible data. Documents consistently...

CVE-2023-22011

CVE-2023-22011 affects Oracle BI Enterprise Edition (Analytics Server). Affected: Oracle Analytics BI EE with Analytics Server component on versions 6.4.0.0.0 and 7.0.0.0.0. Issue: easily exploitable via network (HTTP) by a low-privileged attacker, enabling unauthorized update/insert/delete of da...

PT-2023-3984 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0 and 7.0.0.0.0 Description: The issue is related to errors in processing input data in the Analytics Server component of Oracle Business Intelligence Enterprise Edition. This...

Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. Visualize and analyze enterprise data to support decision making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle Business...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

PT-2023-3980 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 7.0.0.0.0 Description: The issue is related to errors in processing input data in the Analytics Server component of Oracle Business Intelligence Enterprise Edition. This can be exploited...

PT-2023-3696 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0 through 7.0.0.0.0 Description: The issue is related to insufficient input validation in the Analytics Server component. It allows a low-privileged attacker with network access...

WordPress Independent Analytics - Google Analytics Alternative for WordPress Plugin < 1.26.0 is vulnerable to Cross Site Scripting (XSS)

Software Independent Analytics - Google Analytics Alternative for WordPress Type Plugin Vulnerable versions 1.26.0 Fixed in 1.26.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress Dashy – Google Analytics advanced dashboard Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Dashy – Google Analytics advanced dashboard Type Plugin Vulnerable versions = 2.1.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d2fd720a0fb0 Credits Rafie...

WordPress GA4WP: Google Analytics for WordPress Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software GA4WP: Google Analytics for WordPress Type Plugin Vulnerable versions 2.2.0 Fixed in 2.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID afc97efd69b5 Credits Rafie Muhamm...

Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. Visualize and analyze enterprise data to support decision making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle Business...