A vulnerability exists in Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 that permits an unauthenticated attacker possessing network access over HTTP to trigger a partial denial of service. The flaw is difficult to exploit and affects only the availability of the application, potentially causing the BI search engine or web interface to become unresponsive for some requests.

Oracle Corporation's Oracle Business Intelligence Enterprise Edition is the sole product affected; the vulnerability specifically targets version 12.2.1.4.0.

The CVSS base score of 3.7 indicates a low severity impact on availability only. The EPSS score is <1%, indicating a very low probability of exploitation, and the CVE is not listed in the CISA KEV catalog, signifying no publicly known exploits at present. The attack vector is network-based via HTTP and requires no authentication, meaning any external host able to reach the BI server could attempt the exploitation. Although the score is low, successful exploitation could disrupt business operations by causing intermittent service interruptions, warranting monitoring and timely patching.