CVE-2026-71056 in Business Intelligence Enterprise Editionالمعلومات

الملخص

بحسب MITRE • 19/08/2026

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Oracle

حجز

05/08/2026

إفشاء

19/08/2026

الاعتدال

تمت الموافقة

إدخال

VDB-392204

EPSS

0.00326

KEV

لا

النشاطات

منخفض جدًا

القطاع

Energy, Police, ...

المصادر

Interested in the pricing of exploits?

See the underground prices here!