Threats Tagged 'cve-2026-83304'

A vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web General) allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability has a high CVSS 3.1 base score of 8.9, reflecting high confidentiality and integrity impacts and a low availability impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.

CVE-2026-83304 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as partial denial of service. The vulnerability affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.