CVE-2009-0989

CVE-2009-0989 affects Oracle BI Publisher in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3. Description indicates an unspecified vulnerability allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. Connected sources list these versions under...

CVE-2009-1017

Oracle BI Publisher in Oracle Application Server 5.6.2 and certain 10.1.3.x builds contains an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors. The issue is associated with BI Publisher (Oracle XML Publisher/BI Publisher) components a...

CVE-2009-1017

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994...

CVE-2009-0994

Oracle BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 has an unspecified vulnerability leading to confidentiality impact for remote authenticated users (vectors not disclosed). Affected products are BI Publisher within Oracle Application Server; ro...

CVE-2009-0990

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0989...

CVE-2009-0996

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2009-0996

CVE-2009-0996 affects the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3 and 10.1.3.4. The vulnerability is described as unspecified and allows remote authenticated users to affect confidentiality via unknown vectors. Oracle’s April 2009 CPU advisory (cpuapr2009) provi...

CVE-2009-0994

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017...

Oracle BI Publisher — Response Splitting

Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: Bugs: Response Splitting, XSS, Phishing credentials Exploits: YES Reported: 03.03.2009 Vendor response: 04.03.2009 Last response:...

Information disclosure

Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors...

CVE-2008-2612

CVE-2008-2612 affects the Hyperion BI Plus component in Oracle Application Server (versions 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, 9.3.1.0). The Oracle CPU July 2008 risk matrix marks this as a remote vulnerability exploitable via HTTP with network access and no authentication, with a base CVSS v2 s...

CVE-2006-5675

Affected software: Pentaho BI Suite before 1.2 RC3 (1.2.0.470-RC3). Vulnerability span: possible SQL injection in MySQL scripts related to security changes. Root cause/triage: scripts requiring security changes cited as the issue; exact impact and exploit vectors are not detailed in the provided ...

CVE-2006-5675

Multiple unspecified vulnerabilities in Pentaho Business Intelligence BI Suite before 1.2 RC3 1.2.0.470-RC3 have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts...