The vulnerability is a local platform security flaw that allows an unauthenticated attacker who has logged onto the underlying infrastructure to exploit the Platform Security component of Oracle Business Intelligence Enterprise Edition. The flaw requires human interaction from a user other than the attacker to complete the attack, after which the attacker can achieve full takeover of the BI platform. The exploitation results in confidentiality, integrity, and availability impacts on the system.

Oracle Business Intelligence Enterprise Edition, versions 8.2.0.0.0 and 12.2.1.4.0, where the Platform Security component is affected.

The CVSS v3.1 base score of 7.8 indicates high severity, with a local attack vector (AV:L), low complexity (AC:L), no privileges required (PR:N), and user interaction needed (UI:R). The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, pointing to no known public exploitation yet. The required local access and dependence on a separate user's interaction limit but do not eliminate the threat.