CVE-2026-91608

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, pote...

CVE-2026-91590

A vulnerability exists in the Web Service API component of Oracle BI Publisher (part of Oracle Analytics). Affected versions include 8.2.0.0.0 and 26.01.0.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the product, provided they can ...

CVE-2026-91576

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized access to critical data o...

CVE-2026-91554

The Oracle BI Publisher product within Oracle Analytics (specifically the Web Server component) is affected by a vulnerability in version 12.2.1.4.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can result in una...

CVE-2026-91549

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 12.2.1.4.0 ). An unauthenticated attacker with access to the infrastructure can exploit this vulnerability to compromise the product. While the attack is considered ...

CVE-2026-91534

A vulnerability exists in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this issue to cause a complete Denial of Service (DoS) by trigge...

CVE-2026-91523

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics, specifically within the Analytics Web General component. Affected versions include 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit...

CVE-2026-91518

A vulnerability exists in the BI Publisher Security component of the Oracle BI Publisher product (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, potenti...

CVE-2026-91514

A vulnerability exists in the Web Server component of the Oracle BI Publisher product within Oracle Analytics. Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, pote...

CVE-2026-91241

A critical vulnerability exists in the Analytics Web Administration component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics). Affected versions include 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw t...

CVE-2026-87263

A vulnerability exists in the Analytics Server component of Oracle Business Intelligence Enterprise Edition . The affected versions are 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to ...

CVE-2026-101531

The Oracle Business Intelligence Enterprise Edition product of Oracle Analytics is affected by a vulnerability in the Analytics Server component. Specifically, versions 8.2.0.0.0 and 26.01.0.0.0 are vulnerable. An unauthenticated attacker with network access via HTTP can easily exploit this flaw ...

CVE-2026-101472

A vulnerability exists in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues ) affecting version 3.6.1 . A low-privileged attacker with local access to the infrastructure where the product executes can exploit this vulnerability to compromise the...

CVE-2026-101470

A vulnerability exists in the Installation Issues component of the Oracle Product Lifecycle Analytics product within Oracle Supply Chain, specifically affecting version 3.6.1 . A high-privileged attacker with logon access to the execution infrastructure can easily exploit this flaw to compromise ...

CVE-2026-101469

A vulnerability exists in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues ), specifically affecting version 3.6.1 . A low privileged attacker with network access via SQL can exploit this difficult-to-exploit vulnerability to compromise the pro...

CVE-2026-101471

A vulnerability exists in the Installation Issues component of the Oracle Product Lifecycle Analytics product (version 3.6.1 ) within the Oracle Supply Chain suite. A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the product, potentially gaini...

CVE-2026-112070

The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...

CVE-2026-112068

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site...

CVE-2026-112068 Insecure Direct Object Reference in extension "Analytics" (analytics)

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site...

CVE-2026-112068

The typo3-ext-sa-2026-031 extension (specifically the Analytics module) contains an Insecure Direct Object Reference (IDOR) vulnerability. The backend module fails to verify if a backend user has authorized access to a requested site, allowing users with module access to view the analytics dashbo...