CVE-2017-10157: Medium severity oracle bi publisher vulnerability
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of BI Publisher accessible data as well as unauthorized read access to a subset of BI Publisher accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10157?
CVE-2017-10157 is classified as an easily exploitable vulnerability that allows unauthenticated access to the affected systems.
How do I fix CVE-2017-10157?
To fix CVE-2017-10157, it is recommended to apply the latest patches provided by Oracle for the affected versions of BI Publisher.
Which versions of Oracle BI Publisher are affected by CVE-2017-10157?
The affected versions of Oracle BI Publisher are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0.
Can CVE-2017-10157 be exploited remotely?
Yes, CVE-2017-10157 can be exploited remotely by an unauthenticated attacker with network access via HTTP.
What component of Oracle Fusion Middleware does CVE-2017-10157 affect?
CVE-2017-10157 affects the BI Publisher component of Oracle Fusion Middleware.