BI Publisher (Formerly XML Publisher)

CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability

Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass. Required action: Apply updates per vendor instructions.