← Voltar à pesquisa de CVEs

CVE-2026-71099

Oracle Business Intelligence Enterprise Edition

Descrição

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS 7.2EPSS 0.453%Risco 0.75
Ver fonte
Publicação
2026-08-18 21:18:10
Versões afetadas
==26.01.0.0.0
Tipo
Aplicação web
Última alteração
2026-08-24 15:52:17
Vetor
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H