# Oracle Corporation BI Publisher (formerly XML Publisher).

Every CVE that names Oracle Corporation BI Publisher (formerly XML Publisher) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2024-21084.md)
  `CVE-2024-21084` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.8 Medium · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control
- [Incorrect authorization in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2024-21083.md)
  `CVE-2024-21083` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.2 High · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control
- [XML external entity injection in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2024-21082.md)
  `CVE-2024-21082` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2024 · Tags: XML external entities (XXE)
- [Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).](https://agentprime.io/advisories/CVE-2024-20980.md)
  `CVE-2024-20980` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.4 Medium · Not analysed yet · Published 17 Feb 2024
- [Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).](https://agentprime.io/advisories/CVE-2024-20987.md)
  `CVE-2024-20987` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.4 Medium · Not analysed yet · Published 16 Jan 2024
- [Improper authorization in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2024-20979.md)
  `CVE-2024-20979` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.4 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control
- [Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server).](https://agentprime.io/advisories/CVE-2023-22105.md)
  `CVE-2023-22105` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.4 Medium · Not analysed yet · Published 17 Oct 2023
- [Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security).](https://agentprime.io/advisories/CVE-2023-21970.md)
  `CVE-2023-21970` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.7 Medium · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).](https://agentprime.io/advisories/CVE-2023-21941.md)
  `CVE-2023-21941` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 4.3 Medium · Not analysed yet · Published 18 Apr 2023
- [Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2023-21846.md)
  `CVE-2023-21846` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.8 High · Not analysed yet · Published 17 Jan 2023 · Tags: Broken access control
- [Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)](https://agentprime.io/advisories/CVE-2023-21832.md)
  `CVE-2023-21832` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.8 High · Not analysed yet · Published 17 Jan 2023 · Tags: Broken access control
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API).](https://agentprime.io/advisories/CVE-2022-21590.md)
  `CVE-2022-21590` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 18 Oct 2022
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2022-21523.md)
  `CVE-2022-21523` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 4.3 Medium · Not analysed yet · Published 19 Jul 2022
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2022-21346.md)
  `CVE-2022-21346` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.5 High · Not analysed yet · Published 19 Jan 2022
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2021-2401.md)
  `CVE-2021-2401` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 5.3 Medium · EPSS 0.85 · Not analysed yet · Published 20 Jul 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2021-2400.md)
  `CVE-2021-2400` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.83 · Not analysed yet · Published 20 Jul 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2021-2396.md)
  `CVE-2021-2396` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.36 · Not analysed yet · Published 20 Jul 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2021-2392.md)
  `CVE-2021-2392` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.8 High · Not analysed yet · Published 20 Jul 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler).](https://agentprime.io/advisories/CVE-2021-2391.md)
  `CVE-2021-2391` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.35 · Not analysed yet · Published 20 Jul 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server).](https://agentprime.io/advisories/CVE-2021-2062.md)
  `CVE-2021-2062` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2021-2051.md)
  `CVE-2021-2051` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2021-2050.md)
  `CVE-2021-2050` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration).](https://agentprime.io/advisories/CVE-2021-2049.md)
  `CVE-2021-2049` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2021-2013.md)
  `CVE-2021-2013` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.6 High · Not analysed yet · Published 20 Jan 2021
- [Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2020-14880.md)
  `CVE-2020-14880` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.5 High · Not analysed yet · Published 21 Oct 2020
- [Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).](https://agentprime.io/advisories/CVE-2020-14879.md)
  `CVE-2020-14879` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.5 High · Not analysed yet · Published 21 Oct 2020
- [Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2020-14842.md)
  `CVE-2020-14842` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).](https://agentprime.io/advisories/CVE-2020-14784.md)
  `CVE-2020-14784` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2020
- [Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2020-14780.md)
  `CVE-2020-14780` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates).](https://agentprime.io/advisories/CVE-2020-14696.md)
  `CVE-2020-14696` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.2 High · Not analysed yet · Published 15 Jul 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).](https://agentprime.io/advisories/CVE-2020-14585.md)
  `CVE-2020-14585` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.2 High · Not analysed yet · Published 15 Jul 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).](https://agentprime.io/advisories/CVE-2020-14584.md)
  `CVE-2020-14584` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 8.2 High · Not analysed yet · Published 15 Jul 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).](https://agentprime.io/advisories/CVE-2020-14571.md)
  `CVE-2020-14571` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.2 High · Not analysed yet · Published 15 Jul 2020
- [Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).](https://agentprime.io/advisories/CVE-2020-14570.md)
  `CVE-2020-14570` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.1 High · Not analysed yet · Published 15 Jul 2020
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2906.md)
  `CVE-2019-2906` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 16 Oct 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2898.md)
  `CVE-2019-2898` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 16 Oct 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2771.md)
  `CVE-2019-2771` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2768.md)
  `CVE-2019-2768` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2767.md)
  `CVE-2019-2767` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).](https://agentprime.io/advisories/CVE-2019-2742.md)
  `CVE-2019-2742` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Jul 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2616.md)
  `CVE-2019-2616` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.92 · Not analysed yet · Published 23 Apr 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2601.md)
  `CVE-2019-2601` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Apr 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2595.md)
  `CVE-2019-2595` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 23 Apr 2019
- [Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…](https://agentprime.io/advisories/CVE-2019-2588.md)
  `CVE-2019-2588` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · EPSS 0.37 · Not analysed yet · Published 23 Apr 2019
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).](https://agentprime.io/advisories/CVE-2018-2958.md)
  `CVE-2018-2958` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 18 Jul 2018
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2018-2925.md)
  `CVE-2018-2925` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 18 Jul 2018
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).](https://agentprime.io/advisories/CVE-2018-2900.md)
  `CVE-2018-2900` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 18 Jul 2018
- [Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).](https://agentprime.io/advisories/CVE-2017-10037.md)
  `CVE-2017-10037` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 19 Oct 2017
- [Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API).](https://agentprime.io/advisories/CVE-2017-10034.md)
  `CVE-2017-10034` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 19 Oct 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).](https://agentprime.io/advisories/CVE-2017-10157.md)
  `CVE-2017-10157` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).](https://agentprime.io/advisories/CVE-2017-10156.md)
  `CVE-2017-10156` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service).](https://agentprime.io/advisories/CVE-2017-10059.md)
  `CVE-2017-10059` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).](https://agentprime.io/advisories/CVE-2017-10043.md)
  `CVE-2017-10043` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2017-10041.md)
  `CVE-2017-10041` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2017-10035.md)
  `CVE-2017-10035` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2017-10030.md)
  `CVE-2017-10030` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2017-10029.md)
  `CVE-2017-10029` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).](https://agentprime.io/advisories/CVE-2017-10028.md)
  `CVE-2017-10028` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).](https://agentprime.io/advisories/CVE-2017-10025.md)
  `CVE-2017-10025` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017
- [Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).](https://agentprime.io/advisories/CVE-2017-10024.md)
  `CVE-2017-10024` · CVE record: Oracle Corporation BI Publisher (formerly XML Publisher) · No CVSS score · Not analysed yet · Published 8 Aug 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=oracle-corporation-bi-publisher-formerly-xml-publisher>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/oracle-corporation-bi-publisher-formerly-xml-publisher/>. Everything for agents: <https://agentprime.io/llms.txt>.