# Oracle Business Intelligence Enterprise Edition vulnerabilities Source: https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 52 vulnerabilities in Oracle Business Intelligence Enterprise Edition: 0 in the last 7 days and 50 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91607, was published on 20 October 2026. 19 vulnerabilities in the last four weeks, down 34% on the four before (29). 1 critical against 2. ## Counts - Last 7 days: 0 - Last 30 days: 19 - Last 90 days: 50 - All time: 52 (3 critical, 0 exploited in the wild) ## About Oracle Business Intelligence Enterprise Edition A platform for data analysis, reporting, and dashboard creation. ## Latest Oracle Business Intelligence Enterprise Edition vulnerabilities - [CVE-2026-91607: Oracle Business Intelligence Enterprise Edition unauthorized data read](https://junglewise.ai/threats/cve-2026-91607-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-91600: Oracle Business Intelligence Enterprise Edition unauthorized read access in Visual Analyzer](https://junglewise.ai/threats/cve-2026-91600-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-91598: Oracle Business Intelligence Enterprise Edition information disclosure in Majel Mobile Service](https://junglewise.ai/threats/cve-2026-91598-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-91597: Oracle Business Intelligence Enterprise Edition physical attack in Platform Security](https://junglewise.ai/threats/cve-2026-91597-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.3, published 20 Oct 2026) - [CVE-2026-91588: Oracle Business Intelligence Enterprise Edition BI Search XSS in HTTP](https://junglewise.ai/threats/cve-2026-91588-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-91577: Oracle Business Intelligence Enterprise Edition data access vulnerability in BI Platform Security](https://junglewise.ai/threats/cve-2026-91577-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 6.4, published 20 Oct 2026) - [CVE-2026-91576: Oracle Business Intelligence Enterprise Edition unauthorized data access in Analytics Server](https://junglewise.ai/threats/cve-2026-91576-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-91557: Oracle Business Intelligence Enterprise Edition privilege escalation in BI Foundation](https://junglewise.ai/threats/cve-2026-91557-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 7, published 20 Oct 2026) - [CVE-2026-91549: Oracle Business Intelligence Enterprise Edition privilege escalation](https://junglewise.ai/threats/cve-2026-91549-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 7.8, published 20 Oct 2026) - [CVE-2026-91546: Oracle Business Intelligence Enterprise Edition remote code execution](https://junglewise.ai/threats/cve-2026-91546-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.1, published 20 Oct 2026) - [CVE-2026-91545: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform Security](https://junglewise.ai/threats/cve-2026-91545-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 7.8, published 20 Oct 2026) - [CVE-2026-91539: Oracle Business Intelligence Enterprise Edition privilege escalation in Presentation Services](https://junglewise.ai/threats/cve-2026-91539-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 7.8, published 20 Oct 2026) - [CVE-2026-91535: Oracle Business Intelligence Enterprise Edition privilege escalation in BI Search](https://junglewise.ai/threats/cve-2026-91535-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-91534: Oracle Business Intelligence Enterprise Edition DoS and data access vulnerability](https://junglewise.ai/threats/cve-2026-91534-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.6, published 20 Oct 2026) - [CVE-2026-91524: Oracle Business Intelligence Enterprise Edition DoS in BI Foundation](https://junglewise.ai/threats/cve-2026-91524-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 4.3, published 20 Oct 2026) - [CVE-2026-91523: Oracle Business Intelligence Enterprise Edition input validation](https://junglewise.ai/threats/cve-2026-91523-vulnerability-in-the-oracle-business-intelligence-enterprise) (medium, CVSS 5.4, published 20 Oct 2026) - [CVE-2026-91241: Oracle Business Intelligence Enterprise Edition takeover in Analytics Web Administration](https://junglewise.ai/threats/cve-2026-91241-vulnerability-in-the-oracle-business-intelligence-enterprise) (critical, CVSS 9.1, published 20 Oct 2026) - [CVE-2026-87263: Oracle Business Intelligence Enterprise Edition remote compromise via Analytics Server](https://junglewise.ai/threats/cve-2026-87263-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-101531: Oracle Business Intelligence Enterprise Edition authentication bypass](https://junglewise.ai/threats/cve-2026-101531-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 7.5, published 20 Oct 2026) - [CVE-2026-83336: Oracle Business Intelligence Enterprise Edition privilege escalation in Analytics Server](https://junglewise.ai/threats/cve-2026-83336-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 7.8, published 15 Sep 2026) - [CVE-2026-83335: Oracle Business Intelligence Enterprise Edition remote authentication bypass](https://junglewise.ai/threats/cve-2026-83335-oracle-business-intelligence-enterprise-edition-remote) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83325: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform Security](https://junglewise.ai/threats/cve-2026-83325-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 7.2, published 15 Sep 2026) - [CVE-2026-83324: Oracle Business Intelligence Enterprise Edition privilege escalation in BI Platform Security](https://junglewise.ai/threats/cve-2026-83324-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-83323: Oracle Business Intelligence Enterprise Edition privilege escalation](https://junglewise.ai/threats/cve-2026-83323-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-83322: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform Security](https://junglewise.ai/threats/cve-2026-83322-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 7.2, published 15 Sep 2026) ## Most severe Oracle Business Intelligence Enterprise Edition vulnerabilities - [CVE-2026-83282: Oracle Business Intelligence Enterprise Edition privilege escalation in Platform Security](https://junglewise.ai/threats/cve-2026-83282-oracle-business-intelligence-enterprise-edition-privilege) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-83283: Oracle Business Intelligence Enterprise Edition unauthenticated remote code execution](https://junglewise.ai/threats/cve-2026-83283-oracle-business-intelligence-enterprise-edition-unauthenticated) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-91241: Oracle Business Intelligence Enterprise Edition takeover in Analytics Web Administration](https://junglewise.ai/threats/cve-2026-91241-vulnerability-in-the-oracle-business-intelligence-enterprise) (critical, CVSS 9.1, published 20 Oct 2026) - [CVE-2026-83304: Oracle Business Intelligence Enterprise Edition unauthorized data access in Analytics Web General](https://junglewise.ai/threats/cve-2026-83304-oracle-business-intelligence-enterprise-edition-unauthorized-data) (high, CVSS 8.9, published 15 Sep 2026) - [CVE-2026-83335: Oracle Business Intelligence Enterprise Edition remote authentication bypass](https://junglewise.ai/threats/cve-2026-83335-oracle-business-intelligence-enterprise-edition-remote) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83301: Oracle Business Intelligence Enterprise Edition privilege escalation in Service Administration UI](https://junglewise.ai/threats/cve-2026-83301-oracle-business-intelligence-enterprise-edition-privilege) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-91535: Oracle Business Intelligence Enterprise Edition privilege escalation in BI Search](https://junglewise.ai/threats/cve-2026-91535-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-87263: Oracle Business Intelligence Enterprise Edition remote compromise via Analytics Server](https://junglewise.ai/threats/cve-2026-87263-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.8, published 20 Oct 2026) - [CVE-2026-91534: Oracle Business Intelligence Enterprise Edition DoS and data access vulnerability](https://junglewise.ai/threats/cve-2026-91534-vulnerability-in-the-oracle-business-intelligence-enterprise) (high, CVSS 8.6, published 20 Oct 2026) - [CVE-2026-60671: Oracle Business Intelligence Enterprise Edition DoS and data manipulation in BI Platform Security](https://junglewise.ai/threats/cve-2026-60671-oracle-business-intelligence-enterprise-edition-dos-and-data) (high, CVSS 8.6, published 21 Jul 2026) ## Vulnerabilities per week 19 vulnerabilities in the last four weeks, down 34% on the four before (29). 1 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 29 | 2 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 19 | 1 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Business Intelligence Enterprise Edition vulnerabilities", https://junglewise.ai/threats/technologies/business-intelligence-enterprise-edition, 9 November 2026.