CVE-2026-71095

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0

Description An issue exists in the BI Platform Security component of Oracle Analytics. A low privileged attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized access, creation, deletion, or modification of critical data and all accessible data within the environment. Additionally, this can result in a partial denial of service (partial DOS), which is a condition where the system remains operational but some of its functions or resources are unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.