EUVD-2026-79640
GHSA-43vh-2jxc-r3j5
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Requires an existing low-privileged logon on the BI EE host (AV:L, PR:L), but exploitation is trivial and grants full takeover.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
Local privilege escalation to full instance takeover in Oracle Business Intelligence Enterprise Edition (component: BI Search) affects versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. An attacker who can log on to the host running the BI EE service with only low-privileged credentials can exploit the BI Search component to gain complete control of the platform, with high impact to confidentiality, integrity and availability (CVSS 3.1 base 7.8). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged account with logon access to the infrastructure where Oracle Business Intelligence Enterprise Edition executes (CVSS PR:L, AV:L) - the attacker must already be on or able to log into that host, not merely reach it over the network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals here are consistent and point to a genuinely serious but not remotely exploitable flaw: CVSS 3.1 is 7.8 with AV:L and PR:L, meaning the attacker must already hold a valid low-privileged account and have logon access to the infrastructure hosting BI EE - this is not an internet-facing, unauthenticated attack surface. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix delivered in Oracle's Critical Security Patch Update referenced at https://www.oracle.com/security-alerts/cspusep2026.html; the input does not include an explicit patch version or build number, so confirm the exact required build against the advisory for each of 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 before closing the finding. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today