CVE-2020-14780

Vulnerability in the BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14784

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14780

Vulnerability in the BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14780

Affected product: Oracle Fusion Middleware BI Publisher (BI Publisher Security) in Oracle BI Publisher/Oracle Analytics Server 5.5, 11.1.1.9.x, 12.2.1.3.x, 12.2.1.4.x. Root cause: unspecified in the summary, but the CVSS 3.1 base score is 7.1 with high confidentiality impact and low integrity imp...

CVE-2020-14784

CVE-2020-14784 affects Oracle BI Publisher (Mobile Service) in Oracle Fusion Middleware. Affected: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. Description: unauthenticated remote access over HTTP can lead to full/partial data access and possible data modification; user interaction is required. Impact: un...

The Third Edition of Ross Anderson’s Security Engineering

Ross Andersons fantastic textbook, Security Engineering, will have a third edition. The book wont be published until December, but Ross has been making drafts of the chapters available online as he finishes them. Now that the book is completed, I expect the publisher to make him take the drafts o...

The vulnerability of the Mobile Service component of the BI Publisher software platform from Oracle Fusion Middleware relates to insufficient validation of input data. This allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service component in the BI Publisher reporting tool, a software platform developed by Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the Mobile Service component of the Oracle BI Publisher software platform, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service sub-component of the BI Publisher software development platform, Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protect...

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a perpetrator to perform a cross-site scripting attack.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Mobile Service component of the Oracle BI Publisher software allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service component of the Oracle BI Publisher software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete data...

The vulnerability of the Layout Templates component of the Oracle BI Publisher software allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the Layout Templates component in the Oracle BI Publisher reporting software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protocol...

FlexNet Publisher Information Disclosure Vulnerability

Flexera Software FlexNet Publisher FLEXlm is a software license management core component of the Entitlement Relationship Management Solution from Flexera Software. The product provides software and hardware manufacturers with pricing, packaging and customization of software licensing term...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

Information disclosure

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

CVE-2020-12081

CVE-2020-12081 corresponds to an information-disclosure vulnerability in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be abused to access system files or other important files on the host. The connected sources do not provide explicit exploit details (no in-the-wild exploitati...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Layout Templates Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Unauthorized Access Vulnerability in Oracle BI Publisher (CNVD-2020-41109)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Unauthorized Access Vulnerability in Oracle BI Publisher (CNVD-2020-41108)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...