Oracle Business Intelligence Publisher (October 2012 CPU)

According to the self-reported version of the Remote Oracle Business Intelligence Publisher install, it is missing the October 2012 Critical Patch Update. It is, therefore, affected by multiple reflected cross-site scripting vulnerabilities and an XML eXternal Entity XXE injection vulnerability...

CVE-2012-3194

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2 allows remote attackers to affect integrity via unknown vectors related to Administration...

CVE-2012-3194

The CVE-2012-3194 entry concerns an unspecified vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware versions 10.1.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2. The vulnerability allegedly allows remote attackers to impact integrity via unknown vectors related to Admini...