Listen to this Post
How the CVE Works
CVE-2025-30759 is a Cross-Site Request Forgery (CSRF) vulnerability in Oracle Business Intelligence Enterprise Edition (OBIEE). The flaw exists in the Platform Security component, allowing unauthenticated attackers to craft malicious HTTP requests that execute unauthorized actions when a logged-in user interacts with a malicious link. Due to insufficient CSRF protections, attackers can manipulate BI data—inserting, updating, or deleting records—and access restricted information. The attack requires user interaction but can impact other integrated products due to scope change. The CVSS 3.1 score reflects medium risk (6.1) due to partial confidentiality/integrity breaches.
DailyCVE Form
Platform: Oracle Analytics
Version: 7.6.0.0.0, 8.2.0.0.0, 12.2.1.4.0
Vulnerability: CSRF
Severity: Medium
Date: 07/24/2025
Prediction: Patch by 10/2025
What Undercode Say
Analytics:
curl -X GET http://<target>/analytics -H "Referer: malicious.site"
import requests
csrf_payload = {"action": "delete_record", "id": "123"}
requests.post("http://<target>/bi/sec", data=csrf_payload)
How Exploit
1. Attacker crafts a fake BI dashboard URL.
2. Victim clicks link while authenticated.
3. Malicious request executes with victim’s session.
Protection from this CVE
- Deploy Oracle’s patch.
- Implement anti-CSRF tokens.
- Restrict HTTP referer headers.
Impact
- Unauthorized data modification.
- Limited data exposure.
- Secondary system compromise.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
