CVE-2026-83269: Critical severity Oracle Oracle BI Publisher vulnerability
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Oracle BI Publisher deployments running supported affected versions 8.2.0.0.0, 12.2.1.4.0, or 26.01.0.0.0 are exposed if an attacker has network access to the product over HTTP.
Does exploitation require an account or user interaction?
No. The vulnerability is described as easily exploitable by an unauthenticated attacker, with no privileges or user interaction required.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of Oracle BI Publisher, with high impact to confidentiality, integrity, and availability.