Vulnerabilities fixed in Oracle Analytics

Vulnerabilities have been fixed in Oracle Analytics products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Accessing syst...

Oracle Business Intelligence Publisher 6.4 / 7.0 (OAS) (October 2023 CPU)

The versions of Oracle Business Intelligence Publisher OAS installed on the remote host are affected by a vulnerability as referenced in the October 2023 CPU advisory. - Vulnerability in the BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are...

Oracle Business Intelligence Publisher 6.4 (OAS) (October 2023 CPU)

The versions of Oracle Business Intelligence Publisher OAS installed on the remote host are affected by a vulnerability as referenced in the October 2023 CPU advisory. - Vulnerability in the BI Publisher product of Oracle Analytics component: Development Operations XStream. The supported version...

CVE-2023-45813

Torbot is an open source tor network intelligence tool. In affected versions the torbot.modules.validators.validatelink function uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash...

CVE-2023-45813

Summary: CVE-2023-45813 affects Torbot, an open source tor network intelligence tool. The vulnerability arises in the function torbot.modules.validators.validate_link which uses the python-validators URL validation regex; this regex has exponential complexity, enabling a crafted URL to trigger a ...

Akamai Named an Overall Leader in Fraud Reduction Intelligence Platforms

...

CVE-2023-22082

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2023-22082

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2023-22109

CVE-2023-22109 affects Oracle Analytics’ Oracle BI Enterprise Edition (OBIEE) Analytics Web Dashboards. Affected versions are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. The vulnerability permits a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized updates, inserts, deletes and ...

CVE-2023-22082

The CVE-2023-22082 issue affects Oracle BI Enterprise Edition (OAS) Pod Admin in Oracle Analytics for versions 6.4.0.0.0 and 7.0.0.0.0. Root cause: insufficient input validation in Pod Admin, allowing a low-privileged attacker with HTTP network access and user interaction to perform unauthorized ...

CVE-2023-20273

creationtimestamp| type| source ---|---|--- 2023-10-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1139 2023-10-17 07:43:31+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus20/2023 2023-10-18 08:29:48+00:00| seen|...

CVE-2023-22109: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web Dashboards. Supported versions that are affected are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2023-22082: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

PT-2023-6390

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0, 7.0.0.0.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Analytics Web Dashboards component. It allows a low-privileged attacker with...

Oracle Business Intelligence Enterprise Edition Security Vulnerability

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. Visualize and analyze enterprise data to support decision making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability in Oracle Business...

Oracle Business Intelligence Enterprise Edition Security Vulnerability

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. Visualize and analyze enterprise data to support decision-making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle Business...

PT-2023-6299 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 6.4.0.0.0 through 7.0.0.0.0 Description: The issue is related to insufficient input validation in the Pod Admin component. It allows a low-privileged attacker with network access via HT...

WordPress Royal Elementor 1.3.78 Shell Upload Vulnerability

Today, on October 16, 2023, the Wordfence Threat Intelligence Team became aware of a vulnerability that was recently patched in Royal Elementor Addons and Templates, a WordPress plugin installed on over 200,000 sites, that makes it possible for unauthenticated attackers to upload arbitrary files ...

Friday Squid Blogging: On Squid Intelligence

Article about squid intelligence. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Hive Pro Unveils Revolutionary Platform Uni5 Xposure, Elevating the Potential of Threat Exposure Management

HERNDON, VA., Oct. 10, 2023 - Hive Pro®, a pioneer vendor in Threat Exposure Management today announced the highly-anticipated release of their new platform Uni5 Xposure, which debuts live at the GITEX GLOBAL trade show in Dubai, UAE and at Triangle InfoSec Conference in North Carolina, USA. Uni5...