Oracle Discoverer vulnerabilities

2 CVEs affecting Oracle Discoverer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5500, published 2016-10-25.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-5500, published 2016-10-25. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to Viewer.
• CVE-2016-5495, published 2016-10-25. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema.