CVEvulnerability
CVE-2016-3473
7.7 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.7 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
Affected configurations
• oracle business intelligence publisher 11.1.1.7.0
• oracle business intelligence publisher 11.1.1.9.0
• oracle business intelligence publisher 12.2.1.0.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93719 www.securityfocus.com
- http://www.securitytracker.com/id/1037051 www.securitytracker.com
- https://www.exploit-db.com/exploits/40590/ www.exploit-db.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93719 www.securityfocus.com
- http://www.securitytracker.com/id/1037051 www.securitytracker.com
- https://www.exploit-db.com/exploits/40590/ www.exploit-db.com