Executive brief
Oracle Business Intelligence Enterprise Edition is a reporting and analytics platform used to create dashboards and analyze business data. A vulnerability in its platform security component allows a high-privileged attacker to take complete control of the system and potentially affect other connected Oracle products. Successful exploitation could compromise confidentiality, integrity, and availability of business analytics and data.
Technical details
This is a difficult-to-exploit privilege escalation vulnerability in Oracle Business Intelligence Enterprise Edition's platform security component. The vulnerability requires a high-privileged attacker with network access over HTTP to trigger. The attack has a scope change, meaning compromise of this component can significantly impact other Oracle products in the environment. Successful exploitation results in complete system compromise (confidentiality, integrity, and availability impacts). Version 26.01.0.0.0 is confirmed affected; patch availability is not yet disclosed in the available information.
Affected products
- Oracle Business Intelligence Enterprise Edition 26.01.0.0.0
Timeline
- 2026-08-18: disclosed