Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF 역직렬화 버전: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 설치:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ 참조: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f 익스플로잇 - PoC amf.bin 헤더 cmd에 base64 및 child 포함 !!...

CVE-2025-61882-Oracle-BI-Publisher-RCE

영향받는 소프트웨어: Oracle BI Publisher 버전 12.2.1.4.0, 12.2.1.3.0. 취약점 유형: BI Publisher 통합 구성 요소의 안전하지 않은 역직렬화를 통한 원격 코드 실행. 설명: BI Publisher 통합 구성 요소는 검증 없이 신뢰할 수 없는 데이터를 역직렬화하여, 인증되지 않은 공격자가 기본 서버에서 임의 코드를 실행할 수 있게 합니다...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite 인증되지 않은 원격 코드 실행 CVSS 9.8 중요 개요 CVE-2025-61882는 Oracle E-Business Suite EBS에서 발견된 인증되지 않은 원격 코드 실행 취약점으로, Concurrent Processing 및 BI Publisher 구성 요소에 영향을 미칩니다. 이 결함으로 인해 HTTP를 통해 네트워크 접근이 가능한 인증되지 않은 공격자가 대상 시스템을 완전히 장악할 수 있습니다. 이 취약점은 Clop 랜섬웨어 그룹을 포함한 여러...

High-Quality Data Do Not Mean Safe! Poisoning LLMs after Data Selection

Safety-aligned Large Language Models remain vulnerable to fine-tuning on small sets of harmful or benign-looking samples. However, prior studies typically assume that poisoned samples directly enter downstream fine-tuning, overlooking quality-based selection in practical training pipelines. To fi...

Weaponizing Ground Truth: Data Poisoning Attacks by Exploiting Boundary Misalignment between Antivirus Software and Learning-Based Detectors

Machine-learning ML-based malware detectors are commonly trained using labels obtained from antivirus AV engines and aggregation services e.g., VirusTotal. This practice assumes AV-generated labels provide reliable supervision. However, small byte-level modifications can substantially alter AV...

Vulnerabilities in Oracle Analytics

Oracle has identified 50 vulnerabilities in various Oracle Analytics products, including Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. These vulnerabilities concern various security issues in Oracle Analytics products, including possibilities for unauthorized and...

CVE-2026-83335

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83323

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83324

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83325

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83320

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Administration. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-83322

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83312

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: E-Business Suite - XDO. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83319

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83314

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...

CVE-2026-83311

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle B...

CVE-2026-83318

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Administration. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-83313

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle B...

CVE-2026-83315

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle B...