Description
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| BI Publisher (formerly XML Publisher) | Oracle Corporation / BI Publisher (formerly XML Publisher) | 11.1.1.9.0 | affected |
| BI Publisher (formerly XML Publisher) | Oracle Corporation / BI Publisher (formerly XML Publisher) | 12.2.1.3.0 | affected |
| BI Publisher (formerly XML Publisher) | Oracle Corporation / BI Publisher (formerly XML Publisher) | 12.2.1.4.0 | affected |