This vulnerability affects Oracle Business Intelligence Enterprise Edition (version 26.01.0.0.0) within the Platform Security component. It requires a high privileged attacker with network access over HTTP and no user interaction to exploit. Successful exploitation can result in full compromise of the product, with significant confidentiality, integrity, and availability impacts. The vulnerability has a scope change, meaning it may affect other Oracle products beyond the initially targeted one. The CVSS vector is AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H, reflecting network attack vector, high attack complexity, high privileges required, no user interaction, changed scope, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Oracle has published a Critical Security Patch Update advisory for August 2026 addressing this and many other vulnerabilities but does not explicitly list a patch for this specific version in the provided data.

Successful exploitation allows a high privileged attacker with network access to take over Oracle Business Intelligence Enterprise Edition, impacting confidentiality, integrity, and availability of the system. The vulnerability's scope change indicates potential impact on additional Oracle products beyond the initially affected one. This can lead to significant operational and security risks for affected environments.

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 that addresses numerous vulnerabilities across Oracle products. Customers are strongly advised to apply the latest security patches promptly and remain on actively supported versions. Specific patch availability for Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 should be confirmed by consulting the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html. No explicit patch link was provided in the input data. Until patched, organizations should restrict network access to the affected component and ensure only trusted, high privileged users have access.