CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-04-23
Oracle Fusion Middleware BI Publisher Security Bypass and Data Modification/Disclosure Vulnerability (CVE-2019-2616) Analysis and Mitigation Guide
[Affected Scope] Oracle Fusion Middleware BI Publisher (formerly XML Publisher) versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0
[Impact] Unauthenticated remote attackers can read, update, insert, or delete sensitive data via HTTP, potentially impacting connected downstream systems
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict access to BI Publisher endpoints using a WAF or reverse proxy