Login Request a demo
BP
Product
BI Publisher
by Oracle · last CVE Aug 18, 2026
43
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities43In the news0Timeline
Severity mix
Critical 6High 23Medium 14Low 0
Severity
All severities43Critical6High23Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BI Publisher to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71059
9.9
0%
Aug 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-60719
9.9
0%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-60173
9.8
1%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0
CVE-2024-21082
9.8
1%
Apr 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services)
Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2017-5645
9.8
89%
Apr 17
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71058
8.8
0%
Aug 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2024-21254
8.8
1%
Oct 15
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 7.0.0.0.0; 7.6.0.0.0; 12.2.1.4.0
CVE-2023-21846
8.8
1%
Jan 18
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security)
Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.4.0
CVE-2023-21832
8.8
1%
Jan 18
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security)
Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.4.0
CVE-2021-2396
8.8
36%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2392
8.8
3%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2391
8.8
35%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71057
8.5
0%
Aug 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-61305
8.3
0%
Aug 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2020-14585
8.2
1%
Jul 15
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14584
8.2
1%
Jul 15
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2771
8.2
1%
Jul 23
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security)
Affected: 11.1.1.9.0
CVE-2025-50060
8.1
0%
Jul 15
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 7.6.0.0.0; 8.2.0.0.0; 12.2.1.4.0
CVE-2024-21195
7.6
0%
Oct 15
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates)
Affected: 7.0.0.0.0; 7.6.0.0.0; 12.2.1.4.0
CVE-2022-21590
7.6
1%
Oct 18
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API)
Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2025-30724
7.5
0%
Apr 15
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services)
Affected: 7.6.0.0.0; 12.2.1.4.0
CVE-2022-21346
7.5
2%
Jan 19
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2400
7.5
83%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2768
7.5
2%
Jul 23
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security)
Affected: 11.1.1.9.0
CVE-2024-21083
7.2
1%
Apr 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine)
Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2020-14571
7.2
1%
Jul 15
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2767
7.2
5%
Jul 23
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security)
Affected: 11.1.1.9.0
CVE-2020-14570
7.1
1%
Jul 15
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-60673
6.5
0%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2025-61754
6.5
0%
Oct 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 7.6.0.0.0; 8.2.0.0.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-11358
6.1
87%
Apr 20
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2024-21084
5.8
0%
Apr 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Service Gateway)
Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2023-21970
5.7
1%
Apr 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security)
Affected: 6.4.0.0.0
CVE-2025-30723
5.4
0%
Apr 15
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services)
Affected: 7.6.0.0.0; 12.2.1.4.0
CVE-2024-20987
5.4
0%
Jan 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 12.2.1.4.0
CVE-2024-20979
5.4
0%
Jan 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 6.4.0.0.0; 7.0.0.0.0; 12.2.1.4.0
CVE-2023-22105
5.4
0%
Oct 17
Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2021-2401
5.3
85%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2023-21941
4.3
0%
Apr 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server)
Affected: 6.4.0.0.0; 12.2.1.4.0
CVE-2022-21523
4.3
1%
Jul 19
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2898
4.3
1%
Oct 16
Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: BI Publisher Security)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
Showing 43