A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affecting versions 8.2.0.0.0 and 26.01.0.0.0. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to a full takeover. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities.