Oracle Business Intelligence Enterprise Edition vulnerabilities

16 known CVE vulnerabilities in Oracle Business Intelligence Enterprise Edition, translated and rated.

CVE-2026-21976High
Vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics Cloud component) affects versions 7.6.0.0.0 and 8.2.0.0.0. A low-privileged attacker with local access to the infrastructure can exploit this flaw to unauthorizedly create, delete, or modify data, as well as gain complete access to data.
CVE-2017-10060High
A vulnerability in the Oracle Business Intelligence Enterprise Edition component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
CVE-2016-3544High
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
CVE-2016-3446High
An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Analytics Web Administration.
CVE-2026-71122High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) version 26.01.0.0.0. A high-privileged attacker with network access via HTTP can exploit this, potentially leading to takeover of the system.
CVE-2026-71107High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Server). Affects versions 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to access all data. CVSS 7.5.
CVE-2026-71099High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.
CVE-2026-71098High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Difficult to exploit, allows low-privileged attacker with local access to take over system. CVSS 7.0.
CVE-2026-71097High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security). Affects version 26.01.0.0.0. Easily exploitable, allows low-privileged attacker with local access to take over system. CVSS 7.8.
CVE-2026-71096High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker via HTTP, under difficult conditions, can compromise confidentiality and integrity of data, including critical data, and impact other products (scope change).
CVE-2026-71095High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects version 12.2.1.4.0. A low-privileged attacker via HTTP can easily compromise confidentiality, integrity, and availability of data, including critical data, and cause partial denial of service.
CVE-2026-71094High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) affects version 12.2.1.4.0. A low-privileged attacker with local access to the infrastructure, with user interaction, can take over the system.
CVE-2026-71061High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP can easily gain unauthorized access to critical data.
CVE-2026-71056High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Search) affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged attacker can via HTTP gain unauthorized access to critical data or all data accessible in the product. Attacks may impact additional products (scope change).
CVE-2026-71055High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affects version 12.2.1.4.0. A low-privileged attacker can via HTTP take over the product. The vulnerability has a high CVSS score of 8.8.
CVE-2026-61302High
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Pod Admin) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker can gain complete access to critical data via HTTP and cause partial denial of service.