PT-2026-3723 · Oracle · Oracle Analytics Cloud+1
CVE-2026-21976
·
Publicado
2026-01-20
·
Atualizado
2026-01-20
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0 through 8.2.0.0.0
Description
An easily exploitable issue exists in Oracle Business Intelligence Enterprise Edition, specifically within the Oracle Analytics Cloud component. A low-privileged attacker with access to the system where Oracle Business Intelligence Enterprise Edition is running can compromise the application. Successful exploitation may lead to unauthorized data manipulation, including creation, deletion, or modification of critical data, as well as complete access to all data accessible through Oracle Business Intelligence Enterprise Edition.
Recommendations
Update Oracle Business Intelligence Enterprise Edition version 7.6.0.0.0 to a later version.
Update Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 to a later version.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Oracle Analytics Cloud
Oracle Business Intelligence Enterprise Edition