Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jan 2020 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.200114 or 12.2.1.3.x prior to 12.2.1.3.200114 or 12.2.1.4.x prior to 12.2.1.4.200114. It is, therefore, affected by multiple vulnerabilities as noted in the January 2020 Critical Patch...

CVE-2020-2531

CVE-2020-2531 affects Oracle Business Intelligence Enterprise Edition (Oracle Fusion Middleware BI Platform Security). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability is described as difficult to exploit and requires network access via HTTP, with user interaction from a non-att...