CVE-2017-10068

CVE-2017-10068 is a high-severity vulnerability affecting Oracle Business Intelligence Enterprise Edition (OBIEE) version 12.2.1.3.0, specifically within the Analytics Web Dashboards subcomponent. This easily exploitable flaw allows an unauthenticated attacker, with network access via HTTP, to compromise OBIEE. Successful attacks require user interaction and can lead to unauthorized access to critical data or complete access to all OBIEE-accessible data, as well as unauthorized data modification. The vulnerability has a CVSS 3.0 Base Score of 8.2 (High), indicating significant confidentiality and integrity impacts. Its attack vector is network-based, with low attack complexity, but requires user interaction (UI:R). While the EPSS score is low, suggesting a low probability of exploitation in the wild, its FAUCET Risk Score is 65/100. Currently, there is no known active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of vulnerabilities.