oracle business-intelligence-publisher CVE-2019-2742 vulnerability in Oracle Products
Published on July 23, 2019

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data as well as unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.0 Base Score 7.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N).

NVD


Products Associated with CVE-2019-2742

stack.watch emails you whenever new vulnerabilities are published in Oracle Business Intelligence Publisher or Oracle. Just hit a watch button to start following.

Oracle Business Intelligence Publisher
 
Oracle
 

Affected Versions

Oracle Corporation BI Publisher (formerly XML Publisher) Version 11.1.1.9.0 is affected by CVE-2019-2742

Exploit Probability

EPSS
0.57%
Percentile
68.19%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.