CVE-2024-21195

Summary

CVE-2024-21195 is a vulnerability affecting Oracle BI Publisher, a component of Oracle Analytics. Affected versions include 7.0.0.0.0, 7.6.0.0.0, and 12.2.1.4.0. This vulnerability, with a base score of 7.6 (CVSS 3.1), is easily exploitable by a low-privileged attacker with network access via HTTP. Successful attacks could lead to unauthorized access to critical data or complete access to all Oracle BI Publisher data, as well as the ability to update, insert, delete, or cause a partial denial of service. Confidentiality, integrity, and availability are all impacted. (CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.