Oracle Corporation Oracle BI Publisher

Name: Oracle Corporation Oracle BI Publisher
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high5medium1low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-24998US	high7.5	48.8% (99th)	Exploit	no fix	2023-02-20	2 versions
CVE-2024-38820US	medium5.3	0.62% (49th)	Exploit	no fix	2024-10-18	2 versions
CVE-2024-52046US	critical9.8	24.4% (98th)	—	no fix	2024-12-25	2 versions
CVE-2024-7264US	medium6.5	20.2% (97th)	—	no fix	2024-07-31	2 versions
CVE-2023-38546US	low3.7	5.96% (93rd)	—	no fix	2023-10-18	2 versions
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	2 versions
CVE-2022-36033US	medium6.1	1.64% (76th)	—	no fix	2022-08-29	2 versions
CVE-2024-32007US	high7.5	1.31% (71st)	—	no fix	2024-07-19	2 versions
CVE-2024-37891US	medium6.5	1.14% (66th)	—	no fix	2024-06-17	2 versions
CVE-2023-52428US	high7.5	0.81% (57th)	—	no fix	2024-02-11	2 versions
CVE-2024-30172US	—	0.75% (55th)	—	no fix	2024-05-14	2 versions
CVE-2024-21254US	—OT elevated	0.52% (44th)	—	no fix	2024-10-15	3 versions
CVE-2026-60173US	—	0.51% (43rd)	—	no fix	2026-07-21	2 versions
CVE-2024-21195US	—	0.44% (38th)	—	no fix	2024-10-15	3 versions
CVE-2025-30724US	—	0.43% (38th)	—	no fix	2025-04-15	4 versions
CVE-2026-60673US	—	0.39% (33rd)	—	no fix	2026-07-21	3 versions
CVE-2026-60719US	—	0.39% (33rd)	—	no fix	2026-07-21	3 versions
CVE-2023-25399US	medium5.5	0.38% (32nd)	—	no fix	2023-07-05	2 versions
CVE-2024-38827US	—	0.38% (31st)	—	no fix	2024-12-02	2 versions
CVE-2025-30723US	—	0.34% (27th)	—	no fix	2025-04-15	4 versions
CVE-2025-61754US	—	0.33% (26th)	—	no fix	2025-10-21	2 versions
CVE-2025-50060US	—	0.32% (25th)	—	no fix	2025-07-15	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-284Improper Access Control5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.