Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

BI Publisher (formerly XML Publisher) — Vulnerabilities & Security Advisories 60

All 60 CVE vulnerabilities found in BI Publisher (formerly XML Publisher), with AI-generated Chinese analysis, references, and POCs.

This page details the vulnerability aggregation for BI Publisher, a business intelligence reporting tool formerly known as XML Publisher, specifically focusing on the Common Weakness Enumeration (CWE) taxonomy. The content collects reported security flaws, including remote code execution, injection flaws, and authorization bypass issues, spanning from the initial release of the software through the most recent patches and advisory updates. By organizing these records chronologically and categorizing them by severity and impact, this resource allows security professionals and system administrators to effectively track the vendor’s public advisories and understand the specific characteristics of each weakness class involved. Users can look up a product’s vulnerability history to assess long-term risk trends, identify recurring patterns in older versions, and evaluate the efficacy of past remediation efforts. This structured approach provides a clear view of the attack surface, enabling informed decisions regarding patch management and system hardening without requiring manual compilation of disparate security bulletins. The data serves as a historical reference for auditing compliance and for understanding the evolution of security controls within the product lifecycle. It is designed for technical audiences who need precise, factual information to support security assessments and operational planning. Access to this aggregated view simplifies the process of staying current with known issues, ensuring that teams have a consolidated source for evaluating the current security posture of their BI Publisher deployments.

Vendor: Oracle Corporation

CVE IDTitleCVSSSeverityPublished
CVE-2020-14585 Oracle Fusion Middleware BI Publisher 跨站脚本漏洞 8.2 High2020-07-15
CVE-2020-14584 Oracle Fusion Middleware BI Publisher 跨站脚本漏洞 8.2 High2020-07-15
CVE-2020-14571 Oracle Fusion Middleware BI Publisher 注入漏洞 7.2 High2020-07-15
CVE-2020-14570 Oracle Fusion Middleware BI Publisher 安全漏洞 7.1 High2020-07-15
CVE-2019-2906 Oracle Fusion Middleware BI Publisher 安全漏洞 8.2 -2019-10-16
CVE-2019-2898 Oracle Fusion Middleware BI Publisher 信息泄露漏洞 4.3 -2019-10-16
CVE-2019-2771 Oracle Fusion Middleware BI Publisher组件访问控制错误漏洞 5.4 -2019-07-23
CVE-2019-2768 Oracle Fusion Middleware BI Publisher组件信息泄露漏洞 7.5 -2019-07-23
CVE-2019-2767 Oracle Fusion Middleware BI Publisher 权限许可和访问控制问题漏洞 9.3 -2019-07-23
CVE-2019-2742 Oracle Fusion Middleware BI Publisher组件访问控制错误漏洞 7.2 -2019-07-23
CVE-2019-2616 Oracle Fusion Middleware BI Publisher 访问控制错误漏洞 9.3 -2019-04-23
CVE-2019-2601 Oracle Fusion Middleware BI Publisher 访问控制错误漏洞 7.6 -2019-04-23
CVE-2019-2595 Oracle Fusion Middleware BI Publisher 访问控制错误漏洞 8.2 -2019-04-23
CVE-2019-2588 Oracle Fusion Middleware BI Publisher 信息泄露漏洞 4.9 -2019-04-23
CVE-2018-2958 Oracle Fusion Middleware BI Publisher组件安全漏洞 9.1 -2018-07-18
CVE-2018-2900 Oracle Fusion Middleware BI Publisher组件安全漏洞 8.2 -2018-07-18
CVE-2018-2925 Oracle Fusion Middleware BI Publisher组件安全漏洞 6.5 -2018-07-18
CVE-2017-10037 Oracle Fusion Middleware Oracle BI Publisher组件安全漏洞 7.5 -2017-10-19
CVE-2017-10034 Oracle Fusion Middleware Oracle BI Publisher组件安全漏洞 8.2 -2017-10-19
CVE-2017-10024 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10157 Oracle BI Publisher 安全漏洞 6.5 -2017-08-08
CVE-2017-10156 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10059 Oracle BI Publisher 安全漏洞 7.6 -2017-08-08
CVE-2017-10043 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10041 Oracle BI Publisher 安全漏洞 7.6 -2017-08-08
CVE-2017-10035 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10030 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10029 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10028 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08
CVE-2017-10025 Oracle BI Publisher 安全漏洞 8.2 -2017-08-08

All 60 known CVE vulnerabilities affecting BI Publisher (formerly XML Publisher) with full Chinese analysis, references, and POCs where available.