CVE-2018-2958: Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

Security readout for executives and security teams

CVE-2018-2958 affects Oracle BI Publisher in Oracle Fusion Middleware. An unauthenticated attacker who can reach BI Publisher over HTTP could alter or delete critical BI Publisher-accessible data and read some data. This is a high-urgency issue for any exposed affected version. Exposure is likely where affected Oracle BI Publisher instances are reachable over HTTP from untrusted networks, partners, users, or broad internal segments. Treat as high priority if Oracle BI Publisher is present. The main business risk is unauthorized change or deletion of critical reporting data, with some confidentiality exposure. Urgency rises sharply for HTTP-reachable systems. Mitigation focus: Review Oracle's July 2018 Critical Patch Update for BI Publisher and apply relevant fixes.; Restrict HTTP access to BI Publisher to trusted networks until remediation is confirmed.; Prioritize remediation for internet-facing or broadly accessible internal BI Publisher deployments..

Prepared

Jun 7, 2026, 13:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.