CVE-2019-2771
First published: Tue Jul 23 2019(Updated: )
Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in BI Publisher (formerly XML Publisher), attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all BI Publisher (formerly XML Publisher) accessible data as well as unauthorized read access to a subset of BI Publisher (formerly XML Publisher) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of BI Publisher (formerly XML Publisher). CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Analytics Publisher | =11.1.1.9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-2771?
CVE-2019-2771 is a vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware.
Which versions of Oracle Fusion Middleware are affected by CVE-2019-2771?
CVE-2019-2771 affects versions 11.1.1.9.0 and 12.2.1.3.0 of Oracle Fusion Middleware.
What is the severity of CVE-2019-2771?
CVE-2019-2771 has a severity rating of 8.2 (high).
How can the vulnerability in CVE-2019-2771 be exploited?
The vulnerability in CVE-2019-2771 can be exploited by a low privileged attacker with network access via HTTP.
Is there a fix available for CVE-2019-2771?
Yes, Oracle has released a security advisory with details on how to mitigate the vulnerability in CVE-2019-2771. Please refer to the reference link for more information.
- agent/type
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle analytics publisher
- version/oracle analytics publisher/11.1.1.9.0