Login Request a demo
BP
Product
BI Publisher
by Oracle · last CVE Aug 18, 2026
43
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities43In the news0Timeline
Severity mix
Critical 6High 23Medium 14Low 0
Severity
All severities43Critical6High23Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BI Publisher to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71059
9.9
0%
Aug 18
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-60719
9.9
0%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-60173
9.8
1%
Jul 21
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0
CVE-2024-21082
9.8
1%
Apr 16
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services)
Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2017-5645
9.8
89%
Apr 17
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
Showing 6