Oracle Business Intelligence vulnerabilities
99 known vulnerabilities affecting oracle/business_intelligence.
Total CVEs
99
CISA KEV
3
actively exploited
Public exploits
6
Exploited in wild
6
Severity breakdown
CRITICAL6HIGH41MEDIUM48LOW4
Vulnerabilities
Page 3 of 5
CVE-2017-10068P3HIGHCVSS 8.2v12.2.1.3.02018-01-18
CVE-2017-10068 [HIGH] CVE-2017-10068: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Midd
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Dashboards). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. S
nvd
CVE-2020-14690P3HIGHCVSS 8.2v5.5.0.0.0v11.1.1.9.0+2 more2020-07-15
CVE-2020-14690 [HIGH] CVE-2020-14690: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intellige
nvd
CVE-2026-71097P3HIGHCVSS 7.8v26.01.0.0.02026-08-18
CVE-2026-71097 [HIGH] CWE-284 CVE-2026-71097: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compro
nvd
CVE-2025-53049P3HIGHCVSS 8.4v7.6.0.0.0v8.2.0.0.02025-10-21
CVE-2025-53049 [HIGH] CWE-284 CVE-2025-53049: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise
nvd
CVE-2016-7103P3MEDIUMCVSS 6.1v12.2.1.3.0v12.2.1.4.02017-03-15
CVE-2016-7103 [MEDIUM] CWE-79 CVE-2016-7103: Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
nvd
CVE-2016-3544P3HIGHCVSS 7.6v11.1.1.7.0v11.1.1.9.0+1 more2016-07-21
CVE-2016-3544 [HIGH] CVE-2016-3544: Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web General.
nvd
CVE-2020-14766P3HIGHCVSS 7.1v5.5.0.0.0v11.1.1.9.0+2 more2020-10-21
CVE-2020-14766 [HIGH] CVE-2020-14766: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Administration). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business
nvd
CVE-2026-71094P3HIGHCVSS 7.3v12.2.1.4.02026-08-18
CVE-2026-71094 [HIGH] CWE-284 CVE-2026-71094: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to com
nvd
CVE-2021-23841P3MEDIUMCVSS 5.9v5.5.0.0.0v5.9.0.0.0+2 more2021-02-16
CVE-2021-23841 [MEDIUM] CWE-476 CVE-2021-23841: The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This ma
nvd
CVE-2018-2715P3MEDIUMCVSS 6.5v12.2.1.2.0v12.2.1.3.02018-01-18
CVE-2018-2715 [MEDIUM] CVE-2018-2715: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Midd
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise E
nvd
CVE-2023-21910P3MEDIUMCVSS 6.5v6.4.0.0.0v12.2.1.4.02023-04-18
CVE-2023-21910 [MEDIUM] CVE-2023-21910: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Suc
nvd
CVE-2026-21976P3HIGHCVSS 7.1v7.6.0.0.0v8.2.0.0.02026-01-20
CVE-2026-21976 [HIGH] CVE-2026-21976: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes t
nvd
CVE-2020-1971P3MEDIUMCVSS 5.9v5.5.0.0.0v5.9.0.0.0+2 more2020-12-08
CVE-2020-1971 [MEDIUM] CWE-476 CVE-2020-1971: The X.509 GeneralName type is a generic type for representing different types of names. One of those
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A
nvd
CVE-2017-10163P3MEDIUMCVSS 6.3v11.1.1.7.0v11.1.1.9.0+2 more2017-10-19
CVE-2017-10163 [MEDIUM] CVE-2017-10163: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Midd
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Busines
nvd
CVE-2026-71098P3HIGHCVSS 7.0v26.01.0.0.02026-08-18
CVE-2026-71098 [HIGH] CWE-284 CVE-2026-71098: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to comp
nvd
CVE-2019-2897P4MEDIUMCVSS 6.4v12.2.1.3.0v12.2.1.4.02019-10-16
CVE-2019-2897 [MEDIUM] CVE-2019-2897: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition.
nvd
CVE-2020-14843P4HIGHCVSS 7.1v5.5.0.0.0v12.2.1.3.0+1 more2020-10-21
CVE-2020-14843 [HIGH] CVE-2020-14843: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterpri
nvd
CVE-2020-2537P4HIGHCVSS 7.1v12.2.1.3.0v12.2.1.4.02020-01-15
CVE-2020-2537 [HIGH] CVE-2020-2537: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. S
nvd
CVE-2019-3012P4MEDIUMCVSS 5.3v11.1.1.9.0v12.2.1.3.0+1 more2019-10-16
CVE-2019-3012 [MEDIUM] CVE-2019-3012: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middle
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Ente
nvd
CVE-2017-10058P4MEDIUMCVSS 6.9v11.1.1.9.0v12.2.1.1.0+1 more2017-08-08
CVE-2017-10058 [MEDIUM] CVE-2017-10058: Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Midd
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business In
nvd