CVE-2026-83270
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Vulnerability in Oracle Business Intelligence Enterprise Edition (BI Platform Security component) affecting versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. CVSS 3.1 Base Score 7.5.
Risk Assessment
An unauthenticated attacker can remotely read critical business data, potentially leading to information disclosure and confidentiality breach. High priority due to ease of exploitation and no required authentication.
Recommendation
Immediately apply available Oracle security updates for versions 8.2.0.0.0 and 26.01.0.0.0 and restrict network access to BI Enterprise Edition to trusted sources.
Other vulnerabilities in Oracle Business Intelligence Enterprise Edition
See all- CVE-2026-21976High
Vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics Cloud component) affects versions 7.6.0.0.0 and 8.2.0.0.0. A low-privileged attacker with local access to the infrastructure can exploit this flaw to unauthorizedly create, delete, or modify data, as well as gain complete access to data.
- CVE-2017-10060High
A vulnerability in the Oracle Business Intelligence Enterprise Edition component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2016-3544High
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
- CVE-2016-3446High
An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.
- CVE-2026-83283Critical
Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
- CVE-2026-83282Critical
Vulnerability in the Oracle Business Intelligence Enterprise Edition product (component: Platform Security) affecting version 12.2.1.4.0. A low privileged attacker with network access via HTTP can easily exploit this vulnerability, and attacks may significantly impact additional products (scope change).
- CVE-2020-14864HighActively exploited
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Installation) affecting versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can compromise the product, leading to unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-83336High
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure to compromise Oracle Business Intelligence Enterprise Edition.
- CVE-2026-83335High
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.
- CVE-2026-83325High
Vulnerability in Oracle Business Intelligence Enterprise Edition (Platform Security component) of Oracle Analytics (versions 8.2.0.0.0 and 26.01.0.0.0). A high-privileged attacker with network access via HTTP can fully compromise Oracle Business Intelligence Enterprise Edition. CVSS 7.2 (Confidentiality, Integrity, and Availability impacts).
Original NVD description (English source)
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS