Exploited Vulnerabilities DailyCVE-2019-2616: Oracle BI Publisher (Formerly XML Publisher)
EPSS92.1%No. 425 of 1739 in KEV
CVE year2019~3 yrs before listing
Same vendor in KEV46
Same product1
| Field | Value |
|---|---|
| Vendor | Oracle |
| Product | BI Publisher (Formerly XML Publisher) |
| Name | Oracle BI Publisher Unauthorized Access Vulnerability |
| Added to KEV | 2022-03-25 |
| US federal due date | 2022-04-15 |
| Ransomware use | Unknown |
| CWE | – |
CISA description
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Oracle BI Publisher (Formerly XML Publisher) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-25.