Executive brief
Oracle Business Intelligence Enterprise Edition is an analytics platform used to access and analyze critical business data. This vulnerability allows unauthenticated attackers on the network to bypass security controls and gain unauthorized access to sensitive data without requiring valid credentials, potentially exposing confidential business intelligence and analytics information.
Technical details
This is an authentication bypass vulnerability in the BI Platform Security component of Oracle Business Intelligence Enterprise Edition. The vulnerability is easily exploitable and requires only network access via HTTP, with no authentication, user interaction, or special configuration needed. An unauthenticated attacker can compromise the system and gain unauthorized access to critical data stored within the analytics platform. The vulnerability affects versions 8.2.0.0.0 and 26.01.0.0.0; patch availability from Oracle should be verified through official security bulletins.
Affected products
- Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 26.01.0.0.0
Timeline
- 2026-09-15: disclosed