CVE-2017-10163Corporation Business Intelligence Enterprise Edition vulnerability

4 documents4 sources
Severity
6.3MEDIUMNVD
EPSS
0.3%
top 48.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 19
Latest updateMay 13

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:NExploitability: 2.1 | Impact: 4.2

Affected Packages2 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-p9x8-f58c-q7wx: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General)2022-05-13
CVEList
CVE-2017-10163: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General)2017-10-19

💬Community

1
Bugzilla
CVE-2016-10163 Virglrenderer: host memory leakage when creating decode context2017-01-24
CVE-2017-10163 — MEDIUM severity | cvebase