CVE-2016-3474: Medium severity oracle bi publisher vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote attackers to affect confidentiality via vectors related to Security.

Affected Software

3 affected components

Oracle Business Intelligence Publisher=11.1.1.7.0

Oracle Business Intelligence Publisher=11.1.1.9.0

Oracle Business Intelligence Publisher=12.2.1.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3474?

CVE-2016-3474 is classified as a security vulnerability that could lead to potential loss of confidentiality.

How do I fix CVE-2016-3474?

To fix CVE-2016-3474, it is recommended to apply the latest security patches provided by Oracle for the affected versions.

Which versions of Oracle BI Publisher are affected by CVE-2016-3474?

CVE-2016-3474 affects Oracle Business Intelligence Publisher versions 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0.

Can CVE-2016-3474 be exploited remotely?

Yes, CVE-2016-3474 can be exploited remotely by attackers to impact confidentiality.

Is there a known workaround for CVE-2016-3474?

There are no specific workarounds for CVE-2016-3474; applying the necessary security updates is the best approach.