This vulnerability affects Oracle Business Intelligence Enterprise Edition (Oracle Analytics component: Platform Security) version 26.01.0.0.0. It permits a low privileged attacker who has logon access to the infrastructure where the product runs to compromise the system, potentially resulting in complete takeover. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory references a large Critical Security Patch Update released in August 2026 but does not explicitly confirm a patch for this vulnerability in the provided content.

Successful exploitation can lead to full compromise of Oracle Business Intelligence Enterprise Edition, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product instance.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The August 2026 Critical Security Patch Update advisory references many patches but does not explicitly confirm a patch for this specific vulnerability in version 26.01.0.0.0. Users should consult the Oracle advisory directly for the latest patch availability and apply any relevant updates without delay. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.