CVE-2026-83316: High severity Oracle Oracle Business Intelligence Enterprise Edition vulnerability
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Organizations running Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 are affected. Exploitation requires access to the infrastructure where the product executes, so exposure is limited to attackers who can log on to that environment.
What level of access does an attacker need?
An attacker needs a low-privileged account and local access to the infrastructure hosting Oracle Business Intelligence Enterprise Edition. No user interaction is required, but exploitation is rated difficult.
What could happen if exploitation succeeds?
A successful attack can result in takeover of Oracle Business Intelligence Enterprise Edition. The listed impacts include high confidentiality, integrity, and availability impact.