Technology · Oracle

Oracle BI Publisher vulnerabilities

Updated 26 September 2026, 09:11 UTC. Rebuilt every hour.

Junglewise Threat Intelligence has tracked 24 vulnerabilities in Oracle BI Publisher: 0 in the last 7 days and 24 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-83320, was published on 15 September 2026.

Last 7 days: 0
Last 90 days: 24
Critical, all time: 4
Exploited in the wild: 0

About Oracle BI Publisher

A reporting and document generation solution that enables the creation and management of complex business reports from multiple data sources.

Homepage

Latest Oracle BI Publisher vulnerabilities

CVE-2026-83320: Oracle BI Publisher cross-site scripting in AdministrationhighCVSS 7.6EPSS 0.3%15 Sep 2026
CVE-2026-83319: Oracle BI Publisher unauthorized data access in Web Service APIhighCVSS 7.7EPSS 0.3%15 Sep 2026
CVE-2026-83318: Oracle BI Publisher privilege escalation in AdministrationhighCVSS 7.5EPSS 0.3%15 Sep 2026
CVE-2026-83315: Oracle BI Publisher privilege escalation in SOAP interfacehighCVSS 8.8EPSS 0.4%15 Sep 2026
CVE-2026-83314: Oracle BI Publisher privilege escalation in Web Service APIhighCVSS 8.1EPSS 0.4%15 Sep 2026
CVE-2026-83313: Oracle BI Publisher authorization bypass in BI Platform SecurityhighCVSS 7.7EPSS 0.3%15 Sep 2026
CVE-2026-83312: Oracle BI Publisher unauthorized data access in E-Business SuitehighCVSS 7.7EPSS 0.3%15 Sep 2026
CVE-2026-83311: Oracle BI Publisher privilege escalation in SOAP interfacehighCVSS 8.5EPSS 0.3%15 Sep 2026
CVE-2026-83310: Oracle BI Publisher authorization bypass in BI Platform SecurityhighCVSS 8.7EPSS 0.3%15 Sep 2026
CVE-2026-83309: Oracle BI Publisher privilege escalation in Web ServerhighCVSS 8.5EPSS 0.3%15 Sep 2026
CVE-2026-83308: Oracle BI Publisher authentication bypass in SOAP interfacehighCVSS 8.1EPSS 0.4%15 Sep 2026
CVE-2026-83307: Oracle BI Publisher privilege escalation in BI Platform SecurityhighCVSS 8.3EPSS 0.4%15 Sep 2026
CVE-2026-83305: Oracle BI Publisher authentication bypass in BI Platform SecurityhighCVSS 8.6EPSS 0.4%15 Sep 2026
CVE-2026-83303: Oracle BI Publisher privilege escalation in SOAP servicehighCVSS 8.5EPSS 0.3%15 Sep 2026
CVE-2026-83302: Oracle BI Publisher authentication bypass in security componenthighCVSS 8.5EPSS 0.4%15 Sep 2026
CVE-2026-83298: Oracle BI Publisher privilege escalation in BI Platform SecurityhighCVSS 7.2EPSS 0.5%15 Sep 2026
CVE-2026-83297: Oracle BI Publisher privilege escalation via LDAPhighCVSS 8.1EPSS 0.4%15 Sep 2026
CVE-2026-83284: Oracle BI Publisher SOAP request denial of service and data accesshighCVSS 8.6EPSS 0.3%15 Sep 2026
CVE-2026-83269: Oracle BI Publisher unauthenticated remote code executioncriticalCVSS 9.8EPSS 0.5%15 Sep 2026
CVE-2026-83268: Oracle BI Publisher privilege escalation in BI Platform SecuritycriticalCVSS 9.1EPSS 0.5%15 Sep 2026
CVE-2026-83267: Oracle BI Publisher privilege escalation in Security componenthighCVSS 8.5EPSS 0.3%15 Sep 2026
CVE-2026-60719: Oracle BI Publisher unauthorized data access in Web Service APIcriticalCVSS 9.921 Jul 2026
CVE-2026-60673: Oracle BI Publisher information disclosure in XML ServicesmediumCVSS 6.521 Jul 2026
CVE-2026-60173: Oracle BI Publisher remote compromise in BI Platform SecuritycriticalCVSS 9.821 Jul 2026

Most severe Oracle BI Publisher vulnerabilities

Exploited in the wild first, then by severity and CVSS score.

CVE-2026-60719: Oracle BI Publisher unauthorized data access in Web Service APIcriticalCVSS 9.921 Jul 2026
CVE-2026-83269: Oracle BI Publisher unauthenticated remote code executioncriticalCVSS 9.8EPSS 0.5%15 Sep 2026
CVE-2026-60173: Oracle BI Publisher remote compromise in BI Platform SecuritycriticalCVSS 9.821 Jul 2026
CVE-2026-83268: Oracle BI Publisher privilege escalation in BI Platform SecuritycriticalCVSS 9.1EPSS 0.5%15 Sep 2026
CVE-2026-83315: Oracle BI Publisher privilege escalation in SOAP interfacehighCVSS 8.8EPSS 0.4%15 Sep 2026
CVE-2026-83310: Oracle BI Publisher authorization bypass in BI Platform SecurityhighCVSS 8.7EPSS 0.3%15 Sep 2026
CVE-2026-83305: Oracle BI Publisher authentication bypass in BI Platform SecurityhighCVSS 8.6EPSS 0.4%15 Sep 2026
CVE-2026-83284: Oracle BI Publisher SOAP request denial of service and data accesshighCVSS 8.6EPSS 0.3%15 Sep 2026
CVE-2026-83302: Oracle BI Publisher authentication bypass in security componenthighCVSS 8.5EPSS 0.4%15 Sep 2026
CVE-2026-83311: Oracle BI Publisher privilege escalation in SOAP interfacehighCVSS 8.5EPSS 0.3%15 Sep 2026

Vulnerabilities per week

The last 13 weeks, by the week each vulnerability was published.

Vulnerabilities published per week, UTC
Week of	Vulns	Critical
29 Jun 2026	0	0
6 Jul 2026	0	0
13 Jul 2026	0	0
20 Jul 2026	3	2
27 Jul 2026	0	0
3 Aug 2026	0	0
10 Aug 2026	0	0
17 Aug 2026	0	0
24 Aug 2026	0	0
31 Aug 2026	0	0
7 Sep 2026	0	0
14 Sep 2026	21	2
21 Sep 2026	0	0

How this is built

Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.

The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.

Use this data

The same data is at https://junglewise.ai/threats/technologies/bi-publisher.json, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.

Cite as: Junglewise Threat Intelligence, "Oracle BI Publisher vulnerabilities", https://junglewise.ai/threats/technologies/bi-publisher, 26 September 2026.