CVE-2019-2616 Oracle BI Publisher (Formerly XML Publisher)
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
- CVSS
- not scored
On CISA’s exploited list
Oracle BI Publisher Unauthorized Access Vulnerability
- Added
- 2022-03-25
- Federal patch deadline
- 2022-04-15
- Ransomware use
- not known