Oracle BI Publisher vulnerabilities

33 known vulnerabilities in Oracle BI Publisher from Oracle. 33 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle BI Publisher: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91608Oct 20, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v

• 8.8 High severity

  Oracle BI Publisher: URL Redirection to Untrusted Site

  CVE-2026-91579Oct 20, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 7.6 High severity

  Oracle BI Publisher: URL Redirection to Untrusted Site

  CVE-2026-83320Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.7 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83319Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise

• 7.5 High severity

  Oracle BI Publisher: Improper Privilege Management

  CVE-2026-83318Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network acc

• 8.8 High severity

  Oracle BI Publisher: Improper Privilege Management

  CVE-2026-83315Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.1 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83314Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.7 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83313Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 7.7 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83312Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83311Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.7 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83310Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83309Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi

• 8.1 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83308Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.3 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83307Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.6 High severity

  Oracle BI Publisher: Missing Authentication for Critical Functionality

  CVE-2026-83305Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83303Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.5 High severity

  Oracle BI Publisher: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83302Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr

• 7.2 High severity

  Oracle BI Publisher: Improper Privilege Management

  CVE-2026-83298Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compr

• 8.1 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83297Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.6 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83284Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 9.8 Critical severity

  Oracle BI Publisher: Improper Authentication

  CVE-2026-83269Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 9.1 Critical severity

  Oracle BI Publisher: Improper Privilege Management

  CVE-2026-83268Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with networ

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-83267Sep 15, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.9 Critical severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71059Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP t

• 8.8 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71058Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.5 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-71057Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 8.3 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-61305Aug 18, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 9.9 Critical severity

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service…

  CVE-2026-60719Jul 21, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle BI Publisher: Improper Access Control

  CVE-2026-60173Jul 21, 2026Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2025-50060Jul 15, 2025Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.5 High severity

  Oracle BI Publisher: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-30724Apr 15, 2025Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  Oracle BI Publisher: Missing Authorization

  CVE-2024-21254Oct 15, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.6 High severity

  Oracle BI Publisher: Improper Access Control

  CVE-2024-21195Oct 15, 2024Oracle

  Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network acces