CVE-2017-10043: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

Security readout for executives and security teams

This Oracle BI Publisher flaw can let an unauthenticated network attacker compromise BI Publisher if they can get another person to interact with the attack. The stated impact is serious: access to critical BI Publisher data, potentially all BI Publisher-accessible data, and limited unauthorized data changes. Exposure is likely where Oracle BI Publisher 11.1.1.7.0 or 11.1.1.9.0 is reachable over HTTP, including internal portals and externally exposed deployments. Environments without those versions are not indicated as affected by the provided sources. Treat this as high priority for any affected BI Publisher deployment because the vulnerability can expose critical reporting data and permit some unauthorized data modification. Urgency is highest for HTTP-accessible systems and environments storing sensitive operational, financial, or customer data. Mitigation focus: Check Oracle July 2017 CPU guidance for vendor-directed remediation.; Apply the relevant Oracle security update or supported upgrade path.; Restrict BI Publisher HTTP access to trusted networks until remediated..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.