A vulnerability in Oracle Business Intelligence Enterprise Edition (component: Platform Security) allows a low privileged attacker with logon access to the infrastructure to compromise the product. The vulnerability affects versions 8.2.0.0.0 and 26.01.0.0.0. It has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.