Threats Tagged 'cve-2026-83294'

A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. This vulnerability allows an unauthenticated attacker with access to the infrastructure where the product runs to potentially take over the Oracle Business Intelligence Enterprise Edition. Successful exploitation requires user interaction from someone other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted fixes for this and many other vulnerabilities.

CVE-2026-83294 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. It allows an unauthenticated attacker with logon access to the infrastructure where the product runs to potentially take over the system. Successful exploitation requires human interaction from someone other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, recommending prompt patching. No known exploits are reported in the wild at this time.