A vulnerability in Oracle Business Intelligence Enterprise Edition (component FNDN) version 12.2.1.4.0 allows a low privileged attacker with logon access to the infrastructure to compromise the product. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.