Description

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017.

Remediation

References

CVE-2009-0994

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2550)

WordPress 4.1.x Same Origin Method Execution (SOME) Vulnerability (4.1 - 4.1.10)

WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Cross-Site Scripting (15.3)

WordPress Plugin WP Learn Manager Security Bypass (1.1.4)

WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)

Severity

Medium

Classification

CVE-2009-0994

Tags

Missing Update Known Vulnerabilities