Threats Tagged 'cve-2026-83314'

A vulnerability in Oracle BI Publisher's Web Service API allows a low privileged attacker with network access via SOAP to cause unauthorized modification or deletion of critical data and potentially cause denial of service. The affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on integrity and availability. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.

CVE-2026-83314 is a high-severity vulnerability in Oracle BI Publisher's Web Service API that allows a low privileged attacker with network access via SOAP to compromise the system. Exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible data, as well as cause a denial of service by hanging or crashing the application. The affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update. Users are strongly advised to apply the available patches promptly to mitigate the risk.