CVE-2026-60671

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0

Description An issue in the BI Platform Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. Additionally, the attacker may gain unauthorized read access to a subset of data, as well as unauthorized ability to update, insert, or delete certain accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.