Oracle Business Intelligence Publisher vulnerabilities

CVE-2018-2925 [MEDIUM] CVE-2018-2925: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can resu

CVE-2017-10037 [HIGH] CWE-200 CVE-2017-10037: Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Se Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can

CVE-2017-10034 [HIGH] CVE-2017-10034: Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core F Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction fro

CVE-2017-10035 [HIGH] CVE-2017-10035: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than th

CVE-2017-10029 [HIGH] CVE-2017-10029: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and

CVE-2017-10024 [HIGH] CVE-2017-10024: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools) Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker

CVE-2017-10028 [HIGH] CVE-2017-10028: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and

CVE-2017-10059 [HIGH] CVE-2017-10059: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Servic Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker

CVE-2017-10025 [HIGH] CVE-2017-10025: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access

CVE-2017-10156 [HIGH] CVE-2017-10156: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human inte

CVE-2017-10043 [HIGH] CVE-2017-10043: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person ot

CVE-2017-10030 [HIGH] CVE-2017-10030: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person other than the attacker and

CVE-2017-10041 [HIGH] CVE-2017-10041: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks require human interaction from a person ot

CVE-2017-10157 [MEDIUM] CVE-2017-10157: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerab

CVE-2016-3473 [HIGH] CWE-200 CVE-2016-3473: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Mi Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

CVE-2016-3432 [MEDIUM] CVE-2016-3432: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Mi Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server.

CVE-2016-3474 [LOW] CVE-2016-3474: Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Mi Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security.

CVE-2016-0614 [MEDIUM] CVE-2016-0614: Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7. Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.

CVE-2014-3576 [HIGH] CWE-264 CVE-2014-3576: The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11 The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.