CVE-2026-83071: High severity Oracle Oracle Business Intelligence Enterprise Edition vulnerability
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Oracle Business Intelligence Enterprise Edition deployments running affected supported versions 8.2.0.0.0 or 26.01.0.0.0 are exposed, specifically through the Machine Learning component. An attacker must have a logon to the infrastructure where the product executes.
What level of access does an attacker need?
The attacker needs low-privileged access and a valid logon to the underlying infrastructure. No user interaction is required, and the attack vector is local.
What could a successful attack allow?
Successful exploitation can result in takeover of Oracle Business Intelligence Enterprise Edition. Confidentiality, integrity, and availability can all be affected.