Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors.
http://www.securitytracker.com/id/1034711
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html