Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

67 matches found

CVE
CVE•added 2019/07/23 10:31 p.m.•68 views

CVE-2019-2771

CVE-2019-2771 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware, specifically the BI Publisher Security subcomponent. Affected versions listed are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability is described as easily exploitable with network access via HTTP by a low-privil...

8.2CVSS7.3AI score0.00959EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2019/07/23 10:31 p.m.•24 views

CVE-2019-2767

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

6.2AI score0.05238EPSS
SaveExploits0References1
CVE
CVE•added 2019/07/23 10:31 p.m.•203 views

CVE-2019-2767

CVE-2019-2767 – Oracle BI Publisher (XML Publisher) XML External Entity Injection : The vulnerability affects Oracle Fusion Middleware’s BI Publisher component (subcomponent BI Publisher Security) versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. It is exploitable over HTTP without authentication,...

7.2CVSS6.2AI score0.05238EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2019/07/23 10:31 p.m.•81 views

CVE-2019-2768

CVE-2019-2768 affects Oracle Fusion Middleware BI Publisher (XML Publisher) Security, specifically the BI Publisher component, in version 11.1.1.9.0. The vulnerability allows an unauthenticated, network-based attacker to access BI Publisher data via HTTP, potentially leading to unauthorized acces...

7.5CVSS7AI score0.01711EPSS
SaveIn wildExploits0References1Affected Software1
NVD
NVD•added 2019/04/23 7:32 p.m.•33 views

CVE-2019-2601

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

7.6CVSS7.2AI score0.00969EPSS
SaveExploits0References1
Prion
Prion•added 2019/04/23 7:32 p.m.•26 views

Design/Logic Flaw

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

6.4CVSS5.9AI score0.92183EPSS
SaveExploits4References1Affected Software1
Prion
Prion•added 2019/04/23 7:32 p.m.•30 views

Design/Logic Flaw

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

5.8CVSS8AI score0.01272EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2019/04/23 6:16 p.m.•1083 views

CVE-2019-2616

CVE-2019-2616 affects Oracle Fusion Middleware’s BI Publisher/XML Publisher in versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 . It is a XML External Entity (XXE) injection in the BI Publisher Security subcomponent, allowing an unauthenticated, network-accessible attacker (via HTTP) to read server da...

7.2CVSS6AI score0.92183EPSS
SaveIn wildExploits4References2Affected Software1
CVE
CVE•added 2019/04/23 6:16 p.m.•82 views

CVE-2019-2601

CVE-2019-2601 affects Oracle Fusion Middleware’s BI Publisher Security, with affected versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Connected sources confirm a vulnerability where a low-privileged, network-accessible attacker (via HTTP) can exploit the flaw and may gain unauthorized access to B...

7.6CVSS7.4AI score0.00969EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2019/04/23 6:16 p.m.•77 views

CVE-2019-2595

CVE-2019-2595 affects Oracle Fusion Middleware’s BI Publisher Security subcomponent (BI Publisher/ XML Publisher). Affected versions: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach BI Publisher over HTTP to compromise data. Exploitation requ...

8.2CVSS8.1AI score0.01272EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2019/04/23 6:16 p.m.•35 views

CVE-2019-2601

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

7.3AI score0.00969EPSS
SaveExploits0References1
CVE
CVE•added 2019/04/23 6:16 p.m.•171 views

CVE-2019-2588

CVE-2019-2588 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware. The NUCLEI template confirms a path traversal vulnerability in BI Publisher Security affecting versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit a vulnerability in the BI Publisher ...

4.9CVSS4.4AI score0.36787EPSS
SaveIn wildExploits4References1Affected Software1
Packet Storm
Packet Storm•added 2019/04/19 12:00 a.m.•196 views

Oracle Business Intelligence And XML Publisher XML Injection

Exploit Title: XXE in Oracle Business Intelligence and XML Publisher Date: 16.04.19 Exploit Author: @vah13 Vendor Homepage: http://oracle.com Software Link: https://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/index.html Version: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Tested...

7.1AI score0.92183EPSS
SaveExploits4
Exploit DB
Exploit DB•added 2019/04/19 12:00 a.m.•148 views

Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 - XML External Entity Injection

Exploit Title: XXE in Oracle Business Intelligence and XML Publisher Date: 16.04.19 Exploit Author: @vah13 Vendor Homepage: http://oracle.com Software Link: https://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/index.html Version: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Tested...

7.2CVSS7.3AI score0.92183EPSS
SaveExploits4
zdt
zdt•added 2019/04/19 12:00 a.m.•693 views

Oracle Business Intelligence / XML Publisher 12.2.1.4.0 - XML External Entity Injection Exploit

Exploit for windows platform in category web applications Exploit Title: XXE in Oracle Business Intelligence and XML Publisher Exploit Author: @vah13 Vendor Homepage: http://oracle.com Software Link: https://www.oracle.com/technetwork/middleware/bi-enterprise-edition/downloads/index.html Version:...

7.2AI score0.92183EPSS
SaveExploits4
exploitpack
exploitpack•added 2019/04/19 12:00 a.m.•69 views

Oracle Business Intelligence XML Publisher 11.1.1.9.0 12.2.1.3.0 12.2.1.4.0 - XML External Entity Injection

Oracle Business Intelligence XML Publisher 11.1.1.9.0 12.2.1.3.0 12.2.1.4.0 - XML External Entity Injection Exploit Title: XXE in Oracle Business Intelligence and XML Publisher Date: 16.04.19 Exploit Author: @vah13 Vendor Homepage: http://oracle.com Software Link:...

6.4CVSS0.1AI score0.92183EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC•added 2019/01/30 12:00 a.m.•13 views

The vulnerability of the XML Publisher component in the PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected data.

The vulnerability of the XML Publisher component in the PeopleSoft Enterprise PeopleTools business application suite is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP protocol...

8.3CVSS7.2AI score0.01844EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2019/01/16 7:30 p.m.•9 views

CVE-2019-2443

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

7.2CVSS5.8AI score0.01844EPSS
SaveExploits0References2
NVD
NVD•added 2019/01/16 7:30 p.m.•27 views

CVE-2019-2443

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

7.2CVSS6.3AI score0.01844EPSS
SaveExploits0References2
OSV
OSV•added 2019/01/16 7:30 p.m.•8 views

CVE-2019-2433

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

7.2CVSS7.1AI score0.01844EPSS
SaveExploits0References2
Rows per page
Query Builder