CVE-2026-83323 is a vulnerability in the Platform Security component of Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0. It allows a low privileged attacker who has logon access to the underlying infrastructure to compromise the Oracle Business Intelligence Enterprise Edition product. Exploitation requires user interaction from someone other than the attacker and can lead to a complete takeover of the product, with potential impact on other Oracle products (scope change). The CVSS 3.1 vector is AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H, scoring 7.5.

Successful exploitation can result in full compromise of Oracle Business Intelligence Enterprise Edition, affecting confidentiality, integrity, and availability. The attack requires local access with low privileges and user interaction, limiting the ease of exploitation. The vulnerability may also impact other Oracle products due to scope change.

Oracle has released security patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to remediate this issue. No indication from the vendor advisory suggests that no action is required or that the vulnerability is already mitigated without patching.