Oracle Business Intelligence Adfresource Path traversal CVE-2019-2588

Description

Adfresource servlet of Oracle Business Intelligence has a path traversal vulnerability. An attacker can craft a request that accesses potentially sensitive information on the server, which may lead to takeover of the server.

Remediation

Upgrade to the latest version of Oracle Business Intelligence. This issue was fixed in Oracle Critical Patch Update - April 2019

References

Related Vulnerabilities

Severity

Classification

Tags