high7.7Public exploit code
CVE-2016-3473
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection2016-10-20 · webapps · xml
Impact
Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Business Intelligence Publisher | Versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/93719
- http://www.securitytracker.com/id/1037051
- https://www.exploit-db.com/exploits/40590/
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securityfocus.com/bid/93719
- http://www.securitytracker.com/id/1037051
- https://www.exploit-db.com/exploits/40590/