Threats Tagged 'cve-2026-83321'

A vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Actions) affects versions 8.2.0.0.0 and 26.01.0.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity. Oracle has released patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

CVE-2026-83321 is a high-severity vulnerability in Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 26.01.0.0.0) that allows a low privileged attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification (update, insert, delete) of some data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for affected products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.