Threats Tagged 'cve-2026-71056'

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher among many other Oracle products. This update includes 943 security patches targeting Oracle code and third-party components. Oracle strongly recommends applying these patches promptly to mitigate risks, as exploitation attempts have been reported against previously patched vulnerabilities. The affected products include various Oracle software versions across multiple product families, but specific affected versions for Oracle BI Enterprise Edition and BI Publisher are not explicitly detailed in the provided data.