Oracle BI Publisher — Response Splitting

Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: Bugs: Response Splitting, XSS, Phishing credentials Exploits: YES Reported: 03.03.2009 Vendor response: 04.03.2009 Last response:...

Information disclosure

Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors...

CVE-2008-2612

CVE-2008-2612 affects the Hyperion BI Plus component in Oracle Application Server (versions 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, 9.3.1.0). The Oracle CPU July 2008 risk matrix marks this as a remote vulnerability exploitable via HTTP with network access and no authentication, with a base CVSS v2 s...

CVE-2006-5675

Affected software: Pentaho BI Suite before 1.2 RC3 (1.2.0.470-RC3). Vulnerability span: possible SQL injection in MySQL scripts related to security changes. Root cause/triage: scripts requiring security changes cited as the issue; exact impact and exploit vectors are not detailed in the provided ...

CVE-2006-5675

Multiple unspecified vulnerabilities in Pentaho Business Intelligence BI Suite before 1.2 RC3 1.2.0.470-RC3 have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts...