Bi Publisher vulnerabilities

14 known vulnerabilities in Bi Publisher from Oracle. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71059Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP t

• 8.8 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71058Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71057Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.3 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-61305Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 9.9 Critical severity

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service…

  CVE-2026-60719Jul 21, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-60173Jul 21, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2025-50060Jul 15, 2025Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.5 High severity

  Oracle BI Publisher: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-30724Apr 15, 2025Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  Oracle BI Publisher: Missing Authorization

  CVE-2024-21254Oct 15, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.6 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2024-21195Oct 15, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.2 High severity

  BI Publisher (formerly XML Publisher): Incorrect Authorization

  CVE-2024-21083Apr 16, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

• 9.8 Critical severity

  BI Publisher (formerly XML Publisher): Improper Restriction of XML External Entity Reference

  CVE-2024-21082Apr 16, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  BI Publisher (formerly XML Publisher): Improper Access Control

  CVE-2023-21846Jan 18, 2023Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  BI Publisher (formerly XML Publisher): Improper Access Control

  CVE-2023-21832Jan 18, 2023Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces