GCVE-110-NCSC-2024-418

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published October 17, 2024

Oracle heeft kwetsbaarheden verholpen in Analytics producten.

Weaknesses (CWE)

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-476NULL Pointer DereferenceCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-770Allocation of Resources Without Limits or ThrottlingCWE-122Heap-based Buffer OverflowCWE-787Out-of-bounds WriteCWE-918Server-Side Request Forgery (SSRF)CWE-1333Inefficient Regular Expression ComplexityCWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')CWE-345Insufficient Verification of Data Authenticity

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
oracle	bi_publisher	—	—
oracle	business_intelligence	—	—
oracle	business_intelligence_enterprise_edition	—	—

Aliases

CVE-2022-23305 CVE-2023-0401 CVE-2023-35116 CVE-2023-38545 CVE-2023-5678 CVE-2024-21195 CVE-2024-21254 CVE-2024-26308 CVE-2024-29133 CVE-2024-29736 CVE-2024-38809 CVE-2024-38999 CVE-2024-39689

References

advisory

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON