CVE-2026-21976

5 documents5 sources
Severity
7.1HIGH
EPSS
0.0%
top 86.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle Business Intelligence Enterprise EditionOracle Business Intelligence
Timeline
PublishedJan 20
Latest updateJan 21

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation,…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶NVDoracle/business_intelligence7.6.0.0.0, 8.2.0.0.0+1

🔴Vulnerability Details

2
GHSA
GHSA-w9mj-mcph-h88j: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud)↗2026-01-21
▶
CVEList
CVE-2026-21976: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud)↗2026-01-20
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Analytics Risk Matrix: Oracle Analytics Cloud — CVE-2026-21976↗2026-01-15
▶

🕵️Threat Intelligence

1
Wiz
CVE-2026-21976 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶