A high-severity vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Service Administration UI) version 12.2.1.4.0. This flaw allows a low-privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted fixes for this and many other issues. Customers are strongly advised to apply the provided patches promptly to mitigate risk.