Oracle BI Publisher Unauthorized Access Vulnerability
Oracle · BI Publisher (Formerly XML Publisher)
Date added (CISA)
2022-03-25
Remediation due
2022-04-15
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.