CVE-2016-3473: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component (CNVD-2016-10064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A remote securit...

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage:...

Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection

Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage: https://www.oracle.com/ Version: 11.1.1.6.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 Info: Previous...

CVE-2016-6273

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

CVE-2016-6273

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

Code injection

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

CVE-2016-6273

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

CVE-2016-6273

CVE-2016-6273 affects Citrix License Server for Windows and Citrix License Server VPX (versions prior to 11.14.0.1). The vulnerability stems from the lmadmin component in Flexera FlexNet Publisher (before 2015 SP5 and 2016 before R1 SP1) and can be triggered by a remote, unauthenticated attacker ...

PT-2016-6815

Name of the Vulnerable Software and Affected Versions FlexNet Publisher versions prior to 2015 SP5 FlexNet Publisher versions prior to 2016 R1 SP1 Citrix License Server for Windows versions prior to 11.14.0.1 Citrix License Server VPX versions prior to 11.14.0.1 Description The issue allows remot...

CVE-2016-6273: Undefined Security Weakness

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

Joomla! com_publisher component SQL injection vulnerability

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the Joomla! compublisher component. An attacker can use this vulnerability to take control of the application, access or modify data, ...

Suspicious Microsoft Publisher Mail Attachment

Microsoft Office Publisher files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

CVE-2016-3474

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security...

CVE-2016-3474

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

CVE-2016-3432

Oracle BI Publisher (BI Publisher/XML Publisher) in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 is affected by a vulnerability described as unspecified in the BI Publisher component, allowing remote authenticated users to affect confidentiality and integrity via vectors related to the Web ...