Oracle Business Intelligence ReportTemplateService XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle Business Intelligence. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReportTemplateService endpoint, which listens on TCP port 9502 ...

PT-2021-6732

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher, resulting in unauthorized access to critical data or comple...