CVE-2021-2041: 
Oracle Business Intelligence Enterprise Edition (OBIEE) vulnerability analysis and mitigation

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). The affected versions are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. This is a difficult to exploit vulnerability that allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition (Oracle CPU Jan 2021).

The vulnerability affects the Installation component of Oracle Business Intelligence Enterprise Edition. It is classified as difficult to exploit and requires network access via HTTP protocol. The vulnerability allows unauthenticated attackers to potentially compromise the system (Oracle CPU Jan 2021).

A successful exploitation of this vulnerability could result in compromise of Oracle Business Intelligence Enterprise Edition (Oracle CPU Jan 2021).

The vulnerability is considered difficult to exploit and requires an unauthenticated attacker to have network access via HTTP protocol. No known exploits in the wild have been reported at the time of the advisory (Oracle CPU Jan 2021).

Oracle strongly recommends customers apply the Critical Patch Update security patches as soon as possible. Until patches can be applied, it may be possible to reduce risk by blocking network protocols required by an attack. For attacks requiring certain privileges or access to certain packages, removing privileges or access from users that don't need them may help reduce risk (Oracle CPU Jan 2021).