Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

Oracle Fusion - Directory Traversal/Local File Inclusion

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 are vulnerable to local file inclusion vulnerabilities via "getPreviewImage." id: CVE-2020-14864 info: name: Oracle Fusion - Directory Traversal/Local File Inclusion author: Ivo Palazzolo @palaziv severity: high...

Oracle Business Intelligence Enterprise Edition (September 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics...

coeus-ci

Coeus CI すべてを見通す競合インテリジェンス。 Coeus （シーアス）にちなんで名付けられました。Coeus は、探究心を持つ百眼のギリシャ神話のティタン神であり、その名は文字通り「問いかけること」を意味します。CIはCompetitive Intelligence （競合インテリジェンス）の略です。 無料の公開データソースから企業プロフィールを構築する、ビジネスインテリジェンスOSINTツールです。ドメインを与えると、安定性、成長性、技術成熟度、財務健全性、セキュリティ体制、透明性を網羅したスコアリングレポートが返ってきます。 クイックスタート root@kitploit:...

CVE-2026-83336

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83321

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Actions. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-83316

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83294

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

EUVD-2026-79689

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83323

CVE-2026-83323 affects the Platform Security component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically version 26.01.0.0.0 . A low-privileged attacker with logon access to the infrastructure where the product executes can exploit this local vulnerability, thoug...

EUVD-2026-79676

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-79668

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-83304

Oracle Business Intelligence Enterprise Edition (component: Analytics Web General ) in Oracle Analytics is vulnerable via unauthenticated network access over HTTP. Affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . The vulnerability is rated HIGH (CVSS 3.1: 8.9 , vector AV...

EUVD-2026-79653

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Service Administration UI. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83301

This vulnerability affects the Service Administration UI component of Oracle Business Intelligence Enterprise Edition (version 12.2.1.4.0 ). A low-privileged attacker with network access via HTTP can exploit this easily to achieve a full takeover of the product, with high impact to confidentialit...

CVE-2026-83295

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), component Presentation Services , is vulnerable in supported versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 . A low-privileged attacker with network access via SOAP can exploit this vulnerability, described as difficult to explo...

EUVD-2026-79646

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83285

This vulnerability affects the BI Search component of Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 . It is an easily exploitable flaw that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthori...