CVE-2016-3473

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-3473

CVE-2016-3473 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware and is tied to versions 11.1.1.7.x, 11.1.1.9.x, and 12.2.1.0.x. The vulnerability is described as an unspecified vulnerability in the BI Publisher component that allows remote authenticated users to affect c...

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage:...

Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection

Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage: https://www.oracle.com/ Version: 11.1.1.6.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 Info: Previous...

Unspecified Denial of Service Vulnerability in SAP BI Launch Pad

An unspecified denial of service vulnerability exists in SAP BI Launch Pad. The vulnerability could be exploited by an attacker to launch a denial of service attack...

Universal Serial aBUSe: USaBUSe

Universal Serial aBUSe Universal Serial aBUSe is a project released at Defcon 24 by Rogan Dawes. The team took some fairly common attacks fake keyboards in small USB devices that type nasty things and extended them to provide us with a bi-directional binary channel over our own wifi network to gi...

The vulnerability of the Firefox browser, which allows a hacker to replace the address bar

The vulnerability of the Firefox browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to substitute the address bar by using left-to-right writing symbols, combined with writing them using right-to-left writing methods...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security...

CVE-2016-3432

Oracle BI Publisher (BI Publisher/XML Publisher) in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 is affected by a vulnerability described as unspecified in the BI Publisher component, allowing remote authenticated users to affect confidentiality and integrity via vectors related to the Web ...

CVE-2016-3432

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Server...

CVE-2016-3474

CVE-2016-3474 affects Oracle Fusion Middleware’s BI Publisher (formerly XML Publisher) component. Affected versions are 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0. The vulnerability is described as unspecified, with impact on confidentiality via security-related vectors. Several connected sources (NV...

CVE-2016-3446

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration...

CVE-2016-3474

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component (CNVD-2016-05303)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A security...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A security...

CVE-2016-0346

CVE-2016-0346 is an XSS vulnerability in IBM Cognos Business Intelligence. The flaw arises from improper validation of user-supplied input, enabling a remote authenticated attacker to inject arbitrary web script or HTML via a crafted URL, potentially executing in the victim’s browser and stealing...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General...

CVE-2016-0468

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General...