CVE-2017-10157: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

Security readout for executives and security teams

CVE-2017-10157 affects Oracle BI Publisher in Oracle Fusion Middleware. An unauthenticated network attacker reaching the BI Publisher HTTP service could read some accessible data and modify some records. The business risk is unauthorized data exposure or tampering in reporting systems, especially if legacy BI Publisher instances remain reachable. Exposure is likely where affected Oracle Fusion Middleware BI Publisher versions are still deployed and reachable over HTTP. Internet-facing instances are higher priority, but internal reporting portals can still matter because no credentials are required once network access exists. Prioritize remediation for any affected BI Publisher instance exposed beyond tightly controlled networks. The vulnerability is not rated critical, but unauthenticated HTTP access and possible data tampering make lingering legacy deployments a meaningful governance and reporting-integrity risk. Mitigation focus: Review Oracle July 2017 Critical Patch Update guidance for BI Publisher fixes.; Upgrade or patch affected BI Publisher versions according to Oracle guidance.; Restrict HTTP access to BI Publisher to trusted networks and users..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.