Oracle BI Publisher XML External Entity Injection Vulnerability (cpuoct2016)

Oracle BI Publisher is prone to a XML external entity XXE injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3473

CVE-2016-3473 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware and is tied to versions 11.1.1.7.x, 11.1.1.9.x, and 12.2.1.0.x. The vulnerability is described as an unspecified vulnerability in the BI Publisher component that allows remote authenticated users to affect c...

Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection

Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage: https://www.oracle.com/ Version: 11.1.1.6.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 Info: Previous...