oracle business intelligence publisher

Name: oracle business intelligence publisher
Brand: oracle

productUS

cpe:2.3:a:oracle:business_intelligence_publisher:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical24high13medium1low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-2616US	high7.2OT critical	92.2% (100th)	KEV	no fix	2019-04-23	3 versions
CVE-2019-2588US	medium4.9	36.5% (98th)	Exploit	no fix	2019-04-23	3 versions
CVE-2016-3473US	high7.7	13.9% (97th)	Exploit	no fix	2016-10-25	3 versions
CVE-2014-3576US	high7.5	12.8% (96th)	Exploit	no fix	2015-08-14	= 12.2.1.0.0
CVE-2017-10037US	high7.5	2.60% (85th)	—	no fix	2017-10-19	2 versions
CVE-2017-10025US	high8.2	2.12% (82nd)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2018-2958US	high8.2	2.07% (81st)	—	no fix	2018-07-18	4 versions
CVE-2018-2900US	high8.2	2.02% (81st)	—	no fix	2018-07-18	= 11.1.1.7.0
CVE-2017-10034US	high8.2	1.99% (81st)	—	no fix	2017-10-19	2 versions
CVE-2018-2925US	medium6.5	1.97% (80th)	—	no fix	2018-07-18	4 versions
CVE-2016-3474US	low3.7	1.94% (80th)	—	no fix	2016-07-21	3 versions
CVE-2017-10156US	high8.2	1.93% (80th)	—	no fix	2017-08-08	4 versions
CVE-2017-10043US	high8.2	1.93% (80th)	—	no fix	2017-08-08	2 versions
CVE-2017-10035US	high8.2	1.93% (80th)	—	no fix	2017-08-08	2 versions
CVE-2017-10030US	high8.2	1.93% (80th)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2017-10029US	high8.2	1.93% (80th)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2017-10028US	high8.2	1.93% (80th)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2017-10024US	high8.2	1.93% (80th)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2019-2906US	high8.2	1.66% (77th)	—	no fix	2019-10-16	3 versions
CVE-2017-10157US	medium6.5	1.65% (76th)	—	no fix	2017-08-08	4 versions
CVE-2020-14842US	medium5.8	1.43% (73rd)	—	no fix	2020-10-21	4 versions
CVE-2020-14784US	medium5.8	1.43% (73rd)	—	no fix	2020-10-21	3 versions
CVE-2020-14780US	medium5.8	1.43% (73rd)	—	no fix	2020-10-21	4 versions
CVE-2016-0614US	medium4.0	1.41% (73rd)	—	no fix	2016-01-21	3 versions
CVE-2017-10059US	high7.6	1.39% (72nd)	—	no fix	2017-08-08	= 11.1.1.7.0
CVE-2017-10041US	high7.6	1.39% (72nd)	—	no fix	2017-08-08	3 versions
CVE-2020-14880US	high7.5	1.30% (70th)	—	no fix	2020-10-21	4 versions
CVE-2020-14879US	high7.5	1.30% (70th)	—	no fix	2020-10-21	4 versions
CVE-2019-2595US	high8.2	1.27% (70th)	—	no fix	2019-04-23	3 versions
CVE-2020-14696US	high7.2	1.22% (69th)	—	no fix	2020-07-15	3 versions
CVE-2016-3432US	medium5.4	1.20% (68th)	—	no fix	2016-07-21	2 versions
CVE-2021-2051US	medium6.5	1.11% (66th)	—	no fix	2021-01-20	4 versions
CVE-2021-2050US	medium6.5	1.11% (66th)	—	no fix	2021-01-20	4 versions
CVE-2021-2049US	medium6.5	1.11% (66th)	—	no fix	2021-01-20	4 versions
CVE-2021-2013US	medium6.5	1.11% (66th)	—	no fix	2021-01-20	4 versions
CVE-2019-2742US	high7.2	1.08% (65th)	—	no fix	2019-07-23	= 11.1.1.9.0
CVE-2019-2601US	high7.6	0.97% (62nd)	—	no fix	2019-04-23	3 versions
CVE-2021-2062US	medium4.9	0.93% (61st)	—	no fix	2021-01-20	4 versions
CVE-2024-20980US	—	0.31% (24th)	—	no fix	2024-02-17	2 versions

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2649 CVEs
CWE-266Incorrect Privilege Assignment8 CVEs
CWE-287Improper Authentication7 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-284Improper Access Control4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan