NCSC-2025-0028

Oracle heeft kwetsbaarheden verholpen in Oracle Analytics producten, zoals Business Intelligence, Analytics Desktop en BI Publisher.

Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, of zich toegang te verschaffen tot gevoelige gegevens.

Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

medium

high

Use After Free

NULL Pointer Dereference

Uncontrolled Resource Consumption

Allocation of Resources Without Limits or Throttling

Deserialization of Untrusted Data

Uncaught Exception

Uncontrolled Recursion

Improper Restriction of XML External Entity Reference

Out-of-bounds Write

Exposure of Sensitive Information to an Unauthorized Actor

Memory Allocation with Excessive Size Value

Improper Input Validation

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Dependency on Vulnerable Third-Party Component

Always-Incorrect Control Flow Implementation

CWE-399

Inadequate Encryption Strength

Incorrect Resource Transfer Between Spheres

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Excessive Iteration

Missing Encryption of Sensitive Data

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Out-of-bounds Read

Improper Resource Shutdown or Release

Improper Restriction of Operations within the Bounds of a Memory Buffer

Inefficient Regular Expression Complexity