CVE-2026-101472

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle...

CVE-2026-101469

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Product...

CVE-2026-101470

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Product Lifecycle...

CVE-2026-76587 IBM Planning Analytics Buffer Overflow

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system...

CVE-2026-76587

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a stack-based buffer overflow (CWE-121) within the TM1 C++ OData engine . This flaw is caused by improper bounds checking and is reachable via authenticated REST requests. A successful exploit could allow an attacker to execute arbitra...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91608

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-91590

A vulnerability exists in the Web Service API component of Oracle BI Publisher (part of Oracle Analytics). Affected versions include 8.2.0.0.0 and 26.01.0.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the product, provided they can ...

CVE-2026-91576

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized access to critical data o...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

CVE-2026-91549

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0 ). An unauthenticated attacker with access to the infrastructure can exploit this vulnerability to compromise the product. While the attack is considered ...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91523

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics, specifically within the Analytics Web General component. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit...

CVE-2026-91518

A vulnerability exists in the BI Publisher Security component of the Oracle BI Publisher product (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, potenti...

CVE-2026-91514

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, pote...

CVE-2026-91241

A critical vulnerability exists in the Analytics Web Administration component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw t...

CVE-2026-87263

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition . The affected versions are 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to ...

CVE-2026-101531

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the Analytics Server component. Specifically, versions 8.2.0.0.0 and 26.01.0.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can easily exploit this flaw ...

CVE-2026-101472

A vulnerability exists in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues ) affecting version 3.6.1 . A low-privileged attacker with local access to the infrastructure where the product executes can exploit this vulnerability to compromise the...

CVE-2026-101470

A vulnerability exists in the Installation Issues component of the Oracle Product Lifecycle Analytics product within Oracle Supply Chain, specifically affecting version 3.6.1 . A high-privileged attacker with logon access to the execution infrastructure can easily exploit this flaw to compromise ...