Advisories · Technology

Oracle Corporation Oracle BI Publisher.

Every CVE that names Oracle Corporation Oracle BI Publisher among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91608 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91590 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91579 CVE record

CVSS 8.8 High

Open redirect in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Open redirect
Not analysed yet 20 Oct 2026
CVE-2026-91574 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91555 CVE record

CVSS 6.1 Medium

Cross-site request forgery in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Cross-site request forgery (CSRF)
Not analysed yet 20 Oct 2026
CVE-2026-91554 CVE record

CVSS 6.5 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91528 CVE record

CVSS 4.3 Medium

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-91526 CVE record

CVSS 4.7 Medium

Open redirect in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Open redirect
Not analysed yet 20 Oct 2026
CVE-2026-91518 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-91514 CVE record

CVSS 6.5 Medium

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83320 CVE record

CVSS 7.6 High

Open redirect in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Open redirect
Not analysed yet 15 Sept 2026
CVE-2026-83319 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83318 CVE record

CVSS 7.5 High

Improper privilege management in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83315 CVE record

CVSS 8.8 High

Improper privilege management in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83314 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83313 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83312 CVE record

CVSS 7.7 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83311 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83310 CVE record

CVSS 8.7 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83309 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83308 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83307 CVE record

CVSS 8.3 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83305 CVE record

CVSS 8.6 High

Missing authentication in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-83303 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83302 CVE record

CVSS 8.5 High

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 15 Sept 2026
CVE-2026-83298 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83297 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83284 CVE record

CVSS 8.6 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83269 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-83268 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper privilege management in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83267 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-71059 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-71058 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-71057 CVE record

CVSS 8.5 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-61305 CVE record

CVSS 8.3 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2026-60719 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60673 CVE record

CVSS 6.5 Medium

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 21 Jul 2026
CVE-2026-60173 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2025-61754 CVE record

CVSS 6.5 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).
- Oracle Corporation Oracle BI Publisher
- Privilege escalation
Not analysed yet 21 Oct 2025
CVE-2025-50060 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-30724 CVE record

CVSS 7.5 High

Information disclosure in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Information disclosure
Not analysed yet 15 Apr 2025
CVE-2025-30723 CVE record

CVSS 5.4 Medium

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).
- Oracle Corporation Oracle BI Publisher
Not analysed yet 15 Apr 2025
CVE-2024-21254 CVE record

CVSS 8.8 High

Missing authorization in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Oct 2024
CVE-2024-21195 CVE record

CVSS 7.6 High

Improper access control in Oracle Corporation Oracle BI Publisher
- Oracle Corporation Oracle BI Publisher
- Broken access control
Not analysed yet 15 Oct 2024