A vulnerability in Oracle Business Intelligence Enterprise Edition (component: Presentation Services) allows a low privileged attacker with network access via SOAP to gain unauthorized access to critical data. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. Oracle has released security patches addressing this issue as part of its September 2026 Critical Security Patch Update.