Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF deseiralize Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Install:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Ref: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC amf.bin Header c...

CVE-2026-83283

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83269

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

EUVD-2026-79688

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83336

Oracle Business Intelligence Enterprise Edition (component: Analytics Server ) is affected by a local privilege escalation vulnerability in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local logon to the infrastructure can exploit it with no user interaction and l...

EUVD-2026-79678

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83325

CVE-2026-83325 affects the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), impacting versions 8.2.0.0.0 and 26.01.0.0.0 . The vulnerability is easily exploitable over HTTP by a high-privileged attacker with low complexity and no user interaction ...

CVE-2026-83322

This vulnerability affects Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics), specifically the Platform Security component, in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A high-privileged attacker with network access via HTTP can exploit it with low complexity and no ...

EUVD-2026-79675

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83324

CVE-2026-83324 affects Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically the BI Platform Security component, in versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with high complexity . Successf...

EUVD-2026-79674

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Actions. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-79673

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Administration. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-83320

Oracle BI Publisher (Administration component) within Oracle Analytics is affected by an easily exploitable vulnerability in versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, requiring human interaction from ...

CVE-2026-83321

Oracle Business Intelligence Enterprise Edition (component: Analytics Actions ) is affected by a vulnerability in supported versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this to gain unauthorized access to all accessible data (high confide...

EUVD-2026-79671

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83319

Oracle BI Publisher (component: Web Service API ) in Oracle Analytics version 12.2.1.4.0 is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network access via SOAP to compromise the product. Due to a scope change , attacks originating in BI Publisher may significa...

CVE-2026-83317

CVE-2026-83317 affects the Installation component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics). Supported versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 are vulnerable to an easily exploitable local attack by a low-privileged user with logon to the host. Successful explo...

CVE-2026-83316

Oracle Business Intelligence Enterprise Edition (component: Platform Security ) is affected in version 26.01.0.0.0 . The vulnerability is local with high attack complexity , exploitable by a low-privileged attacker with logon to the infrastructure. Successful exploitation results in a takeover of...

CVE-2026-83315

This vulnerability affects Oracle BI Publisher (component: BI Platform Security ) within Oracle Analytics, impacting supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access can exploit the vulnerability via SOAP with low complexity and no user i...