Threats Tagged 'cve-2026-61305'

CVE-2026-61305 is a high-severity vulnerability in Oracle BI Publisher that allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability affects specific versions of Oracle BI Publisher: 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The CVSS 3.1 base score is 8.3, indicating a high impact on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory covering this and other vulnerabilities, recommending prompt patching.

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher among many other Oracle products. This update includes 943 security patches targeting Oracle code and third-party components. Oracle strongly recommends applying these patches promptly to mitigate risks, as exploitation attempts have been reported against previously patched vulnerabilities. The affected products include various Oracle software versions across multiple product families, but specific affected versions for Oracle BI Enterprise Edition and BI Publisher are not explicitly detailed in the provided data.