What is the CVSS score of EUVD-2026-79656?

EUVD-2026-79656 has a CVSS 3.1 base score of 8.9 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L.

Oracle EUVD-2026-79656

| CVE-2026-83304 HIGH

2026-09-15 secalert_us@oracle.com

GHSA-cfcp-32g4-vhv2

Authentication Bypass Denial Of Service Oracle

8.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.9 HIGH

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:18 vuln.today

CVE Published

Sep 15, 2026 - 20:18 nvd

HIGH 8.9

DescriptionNVD

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L).

AnalysisAI

Oracle Business Intelligence Enterprise Edition (8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0) exposes an unauthenticated, network-reachable flaw in the Analytics Web General component that lets an attacker read and tamper with critical data and degrade service availability, with the impact extending beyond the vulnerable product itself (scope change). Oracle rates it 8.9 but flags it as difficult to exploit, meaning the high attack complexity — not missing credentials or user interaction — is the main barrier. …