Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

43 records

Vendor: Oracle Component: Bi Publisher Clear all filters
TI-2026-49752 CVE-2026-71059 · GHSA-xp2f-8xcv-vhw4

Improper access control in Oracle BI Publisher

Priority MEDIUM 43

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-49751 CVE-2026-71058 · GHSA-8pxm-9jh4-v7ph

Improper access control in Oracle BI Publisher

Priority MEDIUM 40

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-49750 CVE-2026-71057 · GHSA-6c9v-5rmq-634f

Improper access control in Oracle BI Publisher

Priority LOW 37

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00376 Published 2026-08-18 No fix listed CWE-284
TI-2026-43949 CVE-2026-61305 · GHSA-9rmm-w62g-8m4r

Improper access control in Oracle BI Publisher

Priority LOW 38

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00387 Published 2026-08-18 No fix listed CWE-284
TI-2026-43382 CVE-2026-60719 · GHSA-66mf-5fqj-p3p5

Improper input validation in Oracle BI Publisher

Priority MEDIUM 43

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00387 Published 2026-07-21 No fix listed CWE-20
TI-2026-43336 CVE-2026-60673 · GHSA-x56h-q8p6-fm95

Information disclosure in Oracle BI Publisher

Priority LOW 29

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00393 Published 2026-07-21 No fix listed CWE-200
TI-2026-42874 CVE-2026-60173 · GHSA-38jr-2hm2-5prc

Improper access control in Oracle BI Publisher

Priority MEDIUM 49

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284
TI-2025-31973 CVE-2025-50060 · GHSA-vhcf-prr9-qcfp

Improper access control in Oracle BI Publisher

Priority LOW 37

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00321 Published 2025-07-15 No fix listed CWE-284
TI-2025-21997 CVE-2025-30724 · GHSA-66m6-88fv-h8x7

Information disclosure in Oracle BI Publisher

Priority LOW 33

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00444 Published 2025-04-15 No fix listed CWE-200
TI-2024-14030 CVE-2024-21254 · GHSA-mw6x-r32h-w49v

Missing authorization in Oracle BI Publisher

Priority MEDIUM 41

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00523 Published 2024-10-15 No fix listed CWE-862
TI-2024-13982 CVE-2024-21195 · GHSA-35j4-qh5f-vwv5

Improper access control in Oracle BI Publisher

Priority LOW 34

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00438 Published 2024-10-15 No fix listed CWE-284
TI-2024-13876 CVE-2024-21084 · GHSA-pvrj-ghv7-6684

Improper access control in Oracle BI Publisher

Priority LOW 32

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Service Gateway).

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00437 Published 2024-04-16 No fix listed CWE-284
TI-2024-13875 CVE-2024-21083 · GHSA-2vjc-6f7c-9p77

Incorrect authorization in Oracle BI Publisher

Priority LOW 35

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00684 Published 2024-04-16 No fix listed CWE-863
TI-2024-13874 CVE-2024-21082 · GHSA-c8fq-23wj-f2cc

XML external entity injection in Oracle BI Publisher

Priority MEDIUM 50

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2024-04-16 No fix listed CWE-611
TI-2024-13772 CVE-2024-20979 · GHSA-jj67-79h2-3725

Improper authorization in Oracle BI Publisher

Priority LOW 24

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00269 Published 2024-01-16 No fix listed CWE-285
TI-2023-08224 CVE-2023-21846 · GHSA-v87v-fqxx-3fpf

Improper access control in Oracle BI Publisher

Priority MEDIUM 41

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00648 Published 2023-01-17 No fix listed CWE-284
TI-2023-08210 CVE-2023-21832 · GHSA-v5c9-q3g2-rw6f

Improper access control in Oracle BI Publisher

Priority MEDIUM 41

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00648 Published 2023-01-17 No fix listed CWE-284
Load more