BI Publisher (formerly XML Publisher) vulnerabilities

5 known vulnerabilities in BI Publisher (formerly XML Publisher) from Oracle. 5 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  BI Publisher (formerly XML Publisher): Incorrect Authorization

  CVE-2024-21083Apr 16, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

• 9.8 Critical severity

  BI Publisher (formerly XML Publisher): Improper Restriction of XML External Entity Reference

  CVE-2024-21082Apr 16, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  BI Publisher (formerly XML Publisher): Improper Access Control

  CVE-2023-21846Jan 18, 2023Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  BI Publisher (formerly XML Publisher): Improper Access Control

  CVE-2023-21832Jan 18, 2023Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.2 High severity

  Oracle BI Publisher Unauthorized Access Exploited

  CVE-2019-2616Apr 23, 2019OracleEPSS 92.2%

  Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unau