Technology · Oracle
Oracle Business Intelligence Enterprise Edition vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 52 vulnerabilities in Oracle Business Intelligence Enterprise Edition: 0 in the last 7 days and 50 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91607, was published on 20 October 2026. 19 vulnerabilities in the last four weeks, down 34% on the four before (29). 1 critical against 2.
- Last 7 days
- 0
- Last 90 days
- 50
- Critical, all time
- 3
- Exploited in the wild
- 0
About Oracle Business Intelligence Enterprise Edition
A platform for data analysis, reporting, and dashboard creation.
Latest Oracle Business Intelligence Enterprise Edition vulnerabilities
- CVE-2026-91607: Oracle Business Intelligence Enterprise Edition unauthorized data readmediumCVSS 4.3
- CVE-2026-91600: Oracle Business Intelligence Enterprise Edition unauthorized read access in Visual AnalyzermediumCVSS 4.3
- CVE-2026-91598: Oracle Business Intelligence Enterprise Edition information disclosure in Majel Mobile ServicemediumCVSS 4.3
- CVE-2026-91597: Oracle Business Intelligence Enterprise Edition physical attack in Platform SecurityhighCVSS 8.3
- CVE-2026-91588: Oracle Business Intelligence Enterprise Edition BI Search XSS in HTTPmediumCVSS 6.5
- CVE-2026-91577: Oracle Business Intelligence Enterprise Edition data access vulnerability in BI Platform SecuritymediumCVSS 6.4
- CVE-2026-91576: Oracle Business Intelligence Enterprise Edition unauthorized data access in Analytics ServermediumCVSS 6.5
- CVE-2026-91557: Oracle Business Intelligence Enterprise Edition privilege escalation in BI FoundationhighCVSS 7
- CVE-2026-91549: Oracle Business Intelligence Enterprise Edition privilege escalationhighCVSS 7.8
- CVE-2026-91546: Oracle Business Intelligence Enterprise Edition remote code executionhighCVSS 8.1
- CVE-2026-91545: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform SecurityhighCVSS 7.8
- CVE-2026-91539: Oracle Business Intelligence Enterprise Edition privilege escalation in Presentation ServiceshighCVSS 7.8
- CVE-2026-91535: Oracle Business Intelligence Enterprise Edition privilege escalation in BI SearchhighCVSS 8.8
- CVE-2026-91534: Oracle Business Intelligence Enterprise Edition DoS and data access vulnerabilityhighCVSS 8.6
- CVE-2026-91524: Oracle Business Intelligence Enterprise Edition DoS in BI FoundationmediumCVSS 4.3
- CVE-2026-91523: Oracle Business Intelligence Enterprise Edition input validationmediumCVSS 5.4
- CVE-2026-91241: Oracle Business Intelligence Enterprise Edition takeover in Analytics Web AdministrationcriticalCVSS 9.1
- CVE-2026-87263: Oracle Business Intelligence Enterprise Edition remote compromise via Analytics ServerhighCVSS 8.8
- CVE-2026-101531: Oracle Business Intelligence Enterprise Edition authentication bypasshighCVSS 7.5
- CVE-2026-83336: Oracle Business Intelligence Enterprise Edition privilege escalation in Analytics ServerhighCVSS 7.8EPSS 0.1%
- CVE-2026-83335: Oracle Business Intelligence Enterprise Edition remote authentication bypasshighCVSS 8.8EPSS 0.4%
- CVE-2026-83325: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform SecurityhighCVSS 7.2EPSS 0.5%
- CVE-2026-83324: Oracle Business Intelligence Enterprise Edition privilege escalation in BI Platform SecurityhighCVSS 7.1EPSS 0.2%
- CVE-2026-83323: Oracle Business Intelligence Enterprise Edition privilege escalationhighCVSS 7.5EPSS 0.1%
- CVE-2026-83322: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform SecurityhighCVSS 7.2EPSS 0.5%
Most severe Oracle Business Intelligence Enterprise Edition vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-83282: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform SecuritycriticalCVSS 9.9EPSS 0.4%
- CVE-2026-83283: Oracle Business Intelligence Enterprise Edition unauthenticated remote code executioncriticalCVSS 9.8EPSS 0.5%
- CVE-2026-91241: Oracle Business Intelligence Enterprise Edition takeover in Analytics Web AdministrationcriticalCVSS 9.1
- CVE-2026-83304: Oracle Business Intelligence Enterprise Edition unauthorized data access in Analytics Web GeneralhighCVSS 8.9EPSS 0.3%
- CVE-2026-83335: Oracle Business Intelligence Enterprise Edition remote authentication bypasshighCVSS 8.8EPSS 0.4%
- CVE-2026-83301: Oracle Business Intelligence Enterprise Edition privilege escalation in Service Administration UIhighCVSS 8.8EPSS 0.4%
- CVE-2026-91535: Oracle Business Intelligence Enterprise Edition privilege escalation in BI SearchhighCVSS 8.8
- CVE-2026-87263: Oracle Business Intelligence Enterprise Edition remote compromise via Analytics ServerhighCVSS 8.8
- CVE-2026-91534: Oracle Business Intelligence Enterprise Edition DoS and data access vulnerabilityhighCVSS 8.6
- CVE-2026-60671: Oracle Business Intelligence Enterprise Edition DoS and data manipulation in BI Platform SecurityhighCVSS 8.6
Vulnerabilities per week
19 vulnerabilities in the last four weeks, down 34% on the four before (29). 1 critical against 2. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 2 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 29 | 2 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 19 | 1 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Oracle Business Intelligence Enterprise Edition vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition)<a href="https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition"><img src="https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition/badge.svg" alt="Oracle Business Intelligence Enterprise Edition vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition.json, and this page as text at https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Oracle Business Intelligence Enterprise Edition vulnerabilities", https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition, 9 November 2026.