A vulnerability exists in Oracle Business Intelligence Enterprise Edition (component: Platform Security) affecting versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0. This vulnerability allows an unauthenticated attacker with access to the infrastructure where the product runs to potentially take over the Oracle Business Intelligence Enterprise Edition. Successful exploitation requires user interaction from someone other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted fixes for this and many other vulnerabilities.