CVE-2012-1686

CVE-2012-1686 affects Oracle BI Enterprise Edition/BI Publisher help page components. The connected ERPScan advisory documents an XSS vulnerability in Oracle BI Help Page (example path includes vt_chrome.js) affecting Oracle BI Enterprise Edition 10.1.3.4.0. The root cause is an XSS flaw in the O...

Oracle BI help page - XSS

Application: Oracle Business Intelligence Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://www.oracle.com Bugs: XSS/phishing credentials Exploits: YES Reported: 26.06.2009 Vendor response: 27.06.2009 Last response: 30.06.2009 Patched: 16.10.2012 Dat...