CVE-2009-1017

Oracle BI Publisher in Oracle Application Server 5.6.2 and certain 10.1.3.x builds contains an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors. The issue is associated with BI Publisher (Oracle XML Publisher/BI Publisher) components a...

CVE-2009-0994

Oracle BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 has an unspecified vulnerability leading to confidentiality impact for remote authenticated users (vectors not disclosed). Affected products are BI Publisher within Oracle Application Server; ro...

CVE-2009-0996

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-0994

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017...

CVE-2009-0996

CVE-2009-0996 affects the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3 and 10.1.3.4. The vulnerability is described as unspecified and allows remote authenticated users to affect confidentiality via unknown vectors. Oracle’s April 2009 CPU advisory (cpuapr2009) provi...

Oracle BI Publisher — Response Splitting

Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: Bugs: Response Splitting, XSS, Phishing credentials Exploits: YES Reported: 03.03.2009 Vendor response: 04.03.2009 Last response:...