CVE-2026-83302

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 12.2.1.4.0

Description A security flaw in the BI Publisher Security component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within Oracle BI Publisher. Additionally, it may allow an attacker to cause a partial denial of service (partial DOS), which is a condition where a system becomes partially unavailable to its intended users. The impact of this issue may extend beyond Oracle BI Publisher to affect additional products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.