Advisories · Technology

Oracle Corporation BI Publisher (formerly XML Publisher).

Every CVE that names Oracle Corporation BI Publisher (formerly XML Publisher) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-21084 CVE record

CVSS 5.8 Medium

Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-21083 CVE record

CVSS 7.2 High

Incorrect authorization in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2024-21082 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

XML external entity injection in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- XML external entities (XXE)
Not analysed yet 16 Apr 2024
CVE-2024-20980 CVE record

CVSS 5.4 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 17 Feb 2024
CVE-2024-20987 CVE record

CVSS 5.4 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 16 Jan 2024
CVE-2024-20979 CVE record

CVSS 5.4 Medium

Improper authorization in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2023-22105 CVE record

CVSS 5.4 Medium

Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 17 Oct 2023
CVE-2023-21970 CVE record

CVSS 5.7 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Apr 2023
CVE-2023-21941 CVE record

CVSS 4.3 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Apr 2023
CVE-2023-21846 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- Broken access control
Not analysed yet 17 Jan 2023
CVE-2023-21832 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation BI Publisher (formerly XML Publisher)
- Oracle Corporation BI Publisher (formerly XML Publisher)
- Broken access control
Not analysed yet 17 Jan 2023
CVE-2022-21590 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Oct 2022
CVE-2022-21523 CVE record

CVSS 4.3 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 19 Jul 2022
CVE-2022-21346 CVE record

CVSS 7.5 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 19 Jan 2022
CVE-2021-2401 CVE record

CVSS 5.3 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jul 2021
CVE-2021-2400 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jul 2021
CVE-2021-2396 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jul 2021
CVE-2021-2392 CVE record

CVSS 8.8 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jul 2021
CVE-2021-2391 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jul 2021
CVE-2021-2062 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jan 2021
CVE-2021-2051 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jan 2021
CVE-2021-2050 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jan 2021
CVE-2021-2049 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jan 2021
CVE-2021-2013 CVE record

CVSS 7.6 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 20 Jan 2021
CVE-2020-14880 CVE record

CVSS 8.5 High

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 21 Oct 2020
CVE-2020-14879 CVE record

CVSS 8.5 High

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 21 Oct 2020
CVE-2020-14842 CVE record

CVSS 8.2 High

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 21 Oct 2020
CVE-2020-14784 CVE record

CVSS 8.2 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 21 Oct 2020
CVE-2020-14780 CVE record

CVSS 7.1 High

Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 21 Oct 2020
CVE-2020-14696 CVE record

CVSS 7.2 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 15 Jul 2020
CVE-2020-14585 CVE record

CVSS 8.2 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 15 Jul 2020
CVE-2020-14584 CVE record

CVSS 8.2 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 15 Jul 2020
CVE-2020-14571 CVE record

CVSS 7.2 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 15 Jul 2020
CVE-2020-14570 CVE record

CVSS 7.1 High

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 15 Jul 2020
CVE-2019-2906 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 16 Oct 2019
CVE-2019-2898 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 16 Oct 2019
CVE-2019-2771 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Jul 2019
CVE-2019-2768 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Jul 2019
CVE-2019-2767 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Jul 2019
CVE-2019-2742 CVE record

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Jul 2019
CVE-2019-2616 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Apr 2019
CVE-2019-2601 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Apr 2019
CVE-2019-2595 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Apr 2019
CVE-2019-2588 CVE record

Oracle Corporation BI Publisher (formerly XML Publisher): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion…
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 23 Apr 2019
CVE-2018-2958 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Jul 2018
CVE-2018-2925 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Jul 2018
CVE-2018-2900 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 18 Jul 2018
CVE-2017-10037 CVE record

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 19 Oct 2017
CVE-2017-10034 CVE record

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 19 Oct 2017
CVE-2017-10157 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10156 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10059 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Mobile Service).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10043 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10041 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10035 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10030 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10029 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10028 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10025 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017
CVE-2017-10024 CVE record

Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).
- Oracle Corporation BI Publisher (formerly XML Publisher)
Not analysed yet 8 Aug 2017