CNNVD-202510-2687 Information

CNNVD ID

CNNVD-202510-2687

CVE-2025-61754

  • CNNVD Published: 2025-10-21

Description (Chinese)

Oracle Analytics是美国甲骨文(Oracle)公司的一个企业分析解决方案。 Oracle Analytics的Oracle BI Publisher 7.6.0.0.0版本和8.2.0.0.0版本存在安全漏洞,该漏洞源于低权限攻击者可通过HTTP网络访问进行攻击,可能导致未经授权访问关键数据或完全访问所有Oracle BI Publisher可访问数据。

Description (English)

Oracle Analytics is a business analysis solution for Oracle. There is a security loophole in Oracle Analytics, versions 7.6.0.0 and 8.2.0.0 for Oracle BI Publicsher, which stems from the fact that low-authorized assailants can attack via the HTTP network, which may result in unauthorized access to key data or full access to all Oracle BI Publicsher.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

甲骨文

Published

2025-10-21

Last Modified

2026-02-24

References

https://www.oracle.com/security-alerts/cpuoct2025.html https://access.redhat.com/security/cve/cve-2025-61754

Patch

https://www.oracle.com/security-alerts/cpuoct2025.html

Share on: