Oracle Business Intelligence Publisher vulnerabilities

39 CVEs affecting Oracle Business Intelligence Publisher, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20980, published 2024-02-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability, published 2019-04-23. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 91.9% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0…
CVE-2019-2588, published 2019-04-23. Medium severity, CVSS 4.9. EPSS: 36.8% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0…
CVE-2016-3473, published 2016-10-25. High severity, CVSS 7.7. EPSS: 13.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect…
CVE-2014-3576, published 2015-08-14. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
CVE-2017-10037, published 2017-10-19. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable…
CVE-2017-10025, published 2017-08-08. High severity, CVSS 8.2. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability…
CVE-2018-2958, published 2018-07-18. High severity, CVSS 8.2. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and…
CVE-2018-2900, published 2018-07-18. High severity, CVSS 8.2. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows…
CVE-2017-10034, published 2017-10-19. High severity, CVSS 8.2. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily…
CVE-2018-2925, published 2018-07-18. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily…

Latest

CVE-2024-20980, published 2024-02-17. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability…
CVE-2021-2062, published 2021-01-20. High severity, CVSS 7.6. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily…
CVE-2021-2051, published 2021-01-20. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and…
CVE-2021-2050, published 2021-01-20. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and…
CVE-2021-2049, published 2021-01-20. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0.…
CVE-2021-2013, published 2021-01-20. High severity, CVSS 7.6. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and…
CVE-2020-14880, published 2020-10-21. High severity, CVSS 8.5. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0.…
CVE-2020-14879, published 2020-10-21. High severity, CVSS 8.5. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0.…
CVE-2020-14842, published 2020-10-21. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0.…
CVE-2020-14784, published 2020-10-21. High severity, CVSS 8.2. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily…