CVE-2016-3473 is an unspecified vulnerability in Oracle BI Publisher (formerly XML Publisher) affecting Oracle Fusion Middleware versions 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0. This vulnerability carries a high CVSSv3 score of 7.7, indicating it can be exploited remotely by authenticated users with low attack complexity, potentially leading to a significant compromise of confidentiality. While there is no evidence of active exploitation (KEV list), an XML External Entity Injection (XXE) exploit for affected versions is publicly available on ExploitDB. Despite this, the vulnerability has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.1.1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.7.0:*:*:*:*:*:*:* | ||
11.1.1.9.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:* | ||
12.2.1.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.