CVE:CVE-2019-2897
CNNVD:CNNVD-201910-1031
Oracle Business Intelligence Enterprise Edition是美国甲骨文（Oracle）公司的一款智能商业分析软件。对企业数据进行可视化分析，从而辅助决策、降低总体拥有成本并提高整个组织的投资回报率。
Oracle Fusion Middleware中的Business Intelligence Enterprise Edition 12.2.1.3.0版本和12.2.1.4.0版本的Analytics Actions组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，影响数据的保密性和完整性。
solution:Upgrade oracle business_intelligence to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle mysql_server to a higher version than 5.7.34,8.0.25,and avoid the version [5.0.0,5.7.34],[8.0.0,8.0.25]