CVE

CVE-2019-2588

4.9

CVSS

Description

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise BI Publisher (formerly XML Publisher). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all BI Publisher (formerly XML Publisher) accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Attack Vector

Privileges Req.

User Interaction

bi publisher (formerly xml publisher)

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~15 seconds

CVE-2019-2588 Scanner

CVE-2019-2588 scanner - Path Traversal vulnerability in Oracle BI Publisher (formerly XML Publisher)

Used 2.9k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: bi publisher (formerly xml publisher)

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →