BI Publisher vulnerabilities | LiveThreat CVE Feed

Product

BI Publisher

by Oracle · last CVE Aug 18, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities43 In the news0 Timeline

Severity mix

Critical 6High 23Medium 14Low 0

Severity

All severities43 Critical6 High23 Medium14 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add BI Publisher to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-71058	8.8	0%	Aug 18	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API) Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2024-21254	8.8	1%	Oct 15	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server) Affected: 7.0.0.0.0; 7.6.0.0.0; 12.2.1.4.0
CVE-2023-21846	8.8	1%	Jan 18	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security) Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.4.0
CVE-2023-21832	8.8	1%	Jan 18	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security) Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.4.0
CVE-2021-2396	8.8	36%	Jul 21	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO) Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2392	8.8	3%	Jul 21	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security) Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2391	8.8	35%	Jul 21	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler) Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71057	8.5	0%	Aug 18	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security) Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-61305	8.3	0%	Aug 18	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security) Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2020-14585	8.2	1%	Jul 15	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service) Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14584	8.2	1%	Jul 15	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security) Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2771	8.2	1%	Jul 23	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security) Affected: 11.1.1.9.0
CVE-2025-50060	8.1	0%	Jul 15	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server) Affected: 7.6.0.0.0; 8.2.0.0.0; 12.2.1.4.0
CVE-2024-21195	7.6	0%	Oct 15	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates) Affected: 7.0.0.0.0; 7.6.0.0.0; 12.2.1.4.0
CVE-2022-21590	7.6	1%	Oct 18	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API) Affected: 5.9.0.0.0; 6.4.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2025-30724	7.5	0%	Apr 15	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services) Affected: 7.6.0.0.0; 12.2.1.4.0
CVE-2022-21346	7.5	2%	Jan 19	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security) Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2400	7.5	83%	Jul 21	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO) Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2768	7.5	2%	Jul 23	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security) Affected: 11.1.1.9.0
CVE-2024-21083	7.2	1%	Apr 16	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine) Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2020-14571	7.2	1%	Jul 15	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service) Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2767	7.2	5%	Jul 23	Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security) Affected: 11.1.1.9.0
CVE-2020-14570	7.1	1%	Jul 15	Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service) Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0