Detections
Analytics
Oracle Business Intelligence Publisher Multiple Vulnerabilities (January 2016 CPU)
medium Nessus Plugin ID 88104
Language:
Synopsis
The remote host is affected by multiple vulnerabilities.Description
The Oracle Business Intelligence Publisher installed on the remote host is affected by multiple vulnerabilities :- An unspecified vulnerability exists in the Security subcomponent that allows an authenticated, remote attacker to affect the confidentiality and integrity of the system. No other details are available.
(CVE-2016-0470)
- Multiple unspecified vulnerabilities exist in the Scheduler subcomponent that allow an unauthenticated, remote attacker to affect the integrity of the system.
No other details are available. (CVE-2016-0401, CVE-2016-0429)
- An unspecified vulnerability exists in the Security subcomponent that allows an authenticated, remote attacker to affect the confidentiality of the system.
No other details are available. (CVE-2016-0614)
Solution
Apply the appropriate patch according to the January 2016 Oracle Critical Patch Update advisory.See Also
Plugin Details
Severity: Medium
ID: 88104
File Name: oracle_bi_publisher_jan_2016_cpu_win.nasl
Version: 1.11
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 1/23/2016
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.7
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS Score Source: CVE-2016-0470
CVSS v3
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:oracle:fusion_middleware, cpe:/a:oracle:business_intelligence_publisher
Required KB Items: installed_sw/Oracle Business Intelligence Publisher
Exploit Ease: No known exploits are available
Patch Publication Date: 1/19/2016
Vulnerability Publication Date: 1/19/2016
Reference Information
CVE: CVE-2016-0401, CVE-2016-0429, CVE-2016-0470, CVE-2016-0614