[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1GoCmG9PJXLp0TwEd1yhgcHonbK-C79pPtazynphrko":3,"g5a-family:oracle\u002Fbusiness_intelligence_publisher":144,"g5a-ex:oracle\u002Fbusiness_intelligence_publisher@*":145},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":59,"kevVulnerabilities":116,"seoMetadata":122,"meta":141},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"oracle","business_intelligence_publisher",11,38,1,"2021-01-20",[14,19,22,24,27,30,33,36,39,42,44],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.1.1.7.0",19,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"11.1.1.9.0",29,{"version":23,"cve_count":11,"kev_count":17,"has_kev":18},"11.1.1.9.04",{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"12.2.1.0.0",4,{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"12.2.1.1.0",3,{"version":31,"cve_count":32,"kev_count":17,"has_kev":18},"12.2.1.2.0",5,{"version":34,"cve_count":35,"kev_count":11,"has_kev":4},"12.2.1.3.0",18,{"version":37,"cve_count":38,"kev_count":11,"has_kev":4},"12.2.1.4.0",16,{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"5.5.0.0.0",9,{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.0.0.0",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.0.0.0","Business Intelligence Publisher by Oracle is a technology product with 11 tracked versions and 38 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":11,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":32,"kev_count":17,"has_kev":18},{"version":34,"cve_count":35,"kev_count":11,"has_kev":4},{"version":37,"cve_count":38,"kev_count":11,"has_kev":4},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},[60,68,75,81,87,92,98,103,107,111],{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":4,"epssScore":67},"CVE-2019-2616","Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). While the vulnerability is in BI Publisher (formerly XML Publisher), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher (formerly XML Publisher) accessible data as well as unauthorized read access to a subset of BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 7.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N).","2019-04-23",7.2,"v3.1","High",0.92183,{"cveId":69,"description":70,"publishedDate":63,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":18,"epssScore":74},"CVE-2019-2588","Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",4.9,"v3.0","Medium",0.36787,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":80},"CVE-2016-3473","Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.","2016-10-25",7.7,0.13948,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":86},"CVE-2014-3576","The processControlCommand function in broker\u002FTransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.","2015-08-14",7.5,0.12794,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":85,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":91},"CVE-2017-10037","Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2017-10-19",0.02603,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":97},"CVE-2017-10025","Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data as well as unauthorized update, insert or delete access to some of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N).","2017-08-08",8.2,0.02119,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":96,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":102},"CVE-2018-2958","Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N).","2018-07-18",0.02067,{"cveId":104,"description":105,"publishedDate":101,"cvssScore":96,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":106},"CVE-2018-2900","Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N).",0.02025,{"cveId":108,"description":109,"publishedDate":90,"cvssScore":96,"cvssVersion":72,"severity":66,"isKev":18,"epssScore":110},"CVE-2017-10034","Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N).",0.01989,{"cveId":112,"description":113,"publishedDate":101,"cvssScore":114,"cvssVersion":72,"severity":73,"isKev":18,"epssScore":115},"CVE-2018-2925","Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",6.5,0.01967,[117],{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"severity":66,"isKev":4,"epssScore":67,"cisaVulnName":118,"cisaDateAdded":119,"cisaShortDescription":120,"cisaRequiredAction":121},"Oracle BI Publisher Unauthorized Access Vulnerability","2022-03-25","Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.","Apply updates per vendor instructions.",{"title":123,"metaDescription":124,"keywords":125,"structuredData":126},"Business Intelligence Publisher by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Business Intelligence Publisher by Oracle covering 11 versions with 38 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Business Intelligence Publisher vulnerabilities, Business Intelligence Publisher security, Business Intelligence Publisher CVE, Oracle Business Intelligence Publisher, Business Intelligence Publisher threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Business Intelligence Publisher KEV, Business Intelligence Publisher exploited vulnerabilities",{"@context":127,"@type":128,"name":129,"description":124,"url":130,"manufacturer":131,"applicationCategory":135,"softwareVersion":136,"mainEntity":137},"https:\u002F\u002Fschema.org","SoftwareApplication","Business Intelligence Publisher","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbusiness_intelligence_publisher",{"@type":132,"name":133,"url":134},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","11 versions tracked",{"@type":138,"name":139,"description":140,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Business Intelligence Publisher Security Vulnerabilities","Security vulnerabilities affecting Business Intelligence Publisher by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":142,"apiVersion":143},"2026-10-17T21:38:48.775Z","3.0",[],{"rows":146,"total":11,"capped":18,"failed":17},[147],{"cveId":61,"name":118,"severity":66,"cvss":64,"added":119,"epss":67,"published":148,"ranges":149,"checked":4,"hits":150,"covers":18},"2019-04-23T19:32:51.537",[20,34,37],[]]