Product by Oracle

    Oracle BI Publisher (formerly XML Publisher)

    43 known vulnerabilities in Oracle BI Publisher (formerly XML Publisher) (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    43

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle BI Publisher (formerly XML Publisher) (Oracle)
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    HighCVE-2021-2396

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		8.8
    HighCVE-2021-2391

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		8.8
    HighCVE-2021-2400

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.5
    MediumCVE-2019-11358

    Drupal core: security vulnerability

    also in 89 other products

    		6.1
    CriticalCVE-2021-21346

    XStream is vulnerable to an Arbitrary Code Execution attack

    also in 16 other products

    		6.1
    MediumCVE-2021-2401

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		5.3
    HighCVE-2021-2392

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		8.8
    HighCVE-2019-2767

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.2
    HighCVE-2022-21346

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.5
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    HighCVE-2019-2768

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2026-60173

    Oracle BI Publisher: Improper Access Control

    also in 1 other product

    		9.8
    CriticalCVE-2026-71059

    Oracle BI Publisher: Improper Access Control

    also in 1 other product

    		9.9
    HighCVE-2020-14585

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		8.2
    HighCVE-2020-14584

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		8.2
    CriticalCVE-2024-21082

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2026-60719

    Oracle BI Publisher: Improper Input Validation

    also in 1 other product

    		9.9
    HighCVE-2026-71058

    Oracle BI Publisher: Improper Access Control

    also in 1 other product

    		8.8
    HighCVE-2020-14570

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2026-71057

    Oracle BI Publisher: Improper Access Control

    also in 1 other product

    		8.5
    HighCVE-2026-61305

    Oracle BI Publisher: Improper Access Control

    also in 1 other product

    		8.3
    HighCVE-2020-14571

    Oracle BI Publisher (formerly XML Publisher): security vulnerability

    also in 1 other product

    		7.2
    HighCVE-2019-2771

    Oracle BI Publisher (formerly XML Publisher): Denial of Service

    also in 1 other product

    		8.2
    HighCVE-2024-21254

    Oracle BI Publisher: security vulnerability

    also in 1 other product

    		8.8

    All vulnerabilities in search

    All products by Oracle