CVE-2019-2616CISA KEVEPSS p99.8%

CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability

Oracle / BI Publisher (Formerly XML Publisher)

Description

Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.

Scoring

EPSS92.18% probability of exploitation · percentile 99.8% · 2026-07-28T12:00:27Z

CISA KEV entry

Added to KEV: 2022-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryOracle BI Publisher Unauthorized Access Vulnerabilitykev-cve-2019-26160%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Oracle E-Business Suite Unspecified Vulnerability
CVE
CVE-2025-50060
CVE
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVE
Microsoft Office Publisher Security Feature Bypass Vulnerability
CVE
Oracle WebLogic Server Unspecified Vulnerability
CVE
Apache OFBiz Incorrect Authorization Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.