CRITICAL🇵🇱 Wersja polska

CVE-2026-60173

CVSS 9.8v3.1pub. 2026-07-21upd. 2026-08-03

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oracle Bi Publisher

    APP
    Oracle
    12.2.1.4.08.2.0.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassDoS
CWE
References

Related vulnerabilities

CVE-2026-71059CRITICAL9.9same product

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported ...

CVE-2026-60719CRITICAL9.9PL ✓same product

Krytyczna podatność w Oracle BI Publisher — Web Service API

CVE-2024-21082CRITICAL9.8PL ✓same product

Krytyczna podatność w Oracle BI Publisher – przejęcie systemu bez uwierzytelnienia

CVE-2017-5645CRITICAL9.8PL ✓same product

Apache Log4j 2.x — RCE poprzez deserializację zdarzeń przez socket server

CVE-2026-61305HIGH8.3same product

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Suppo...