CVE-2026-71094
Received Received - Intake

Oracle Business Intelligence Enterprise Edition Privilege Escalation

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-71094

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle business_intelligence_enterprise_edition 12.2.1.4.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0. It allows a low-privileged attacker with local system access to potentially take over the entire application through crafted interactions. The attack requires some user interaction beyond just the attacker.

Impact Analysis

If exploited, this vulnerability could allow an attacker to fully compromise Oracle Business Intelligence Enterprise Edition. This could lead to unauthorized access to sensitive data, modification of system configurations, or disruption of services running on the affected infrastructure.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0. Restrict user access to only necessary privileges and monitor for unusual activity in the Presentation Services component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71094. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart