CVE-2019-2616CISA KEVEPSS p99.8%

CVE-2019-2616Oracle BI Publisher Unauthorized Access Vulnerability

Oracle / BI Publisher (Formerly XML Publisher)

Description

Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.

Scoring

EPSS92.18% probability of exploitation · percentile 99.8% · 2026-06-15T12:03:41Z

CISA KEV entry

Added to KEV: 2022-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryOracle BI Publisher Unauthorized Access Vulnerabilitykev-cve-2019-26160%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Oracle E-Business Suite Unspecified Vulnerability
CVE
CVE-2025-50060
CVE
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVE
CVE-2023-21715
CVE
Oracle WebLogic Server Unspecified Vulnerability
CVE
Apache OFBiz Incorrect Authorization Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.