CRITICAL🇵🇱 Wersja polska

CVE-2026-71059

CVSS 9.9v3.1pub. 2026-08-18upd. 2026-08-24

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Oracle Bi Publisher

    APP
    Oracle
    26.01.0.0.08.2.0.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-60173CRITICAL9.8PL ✓same product

Krytyczna podatność w Oracle BI Publisher umożliwiająca przejęcie systemu

CVE-2026-60719CRITICAL9.9PL ✓same product

Krytyczna podatność w Oracle BI Publisher — Web Service API

CVE-2024-21082CRITICAL9.8PL ✓same product

Krytyczna podatność w Oracle BI Publisher – przejęcie systemu bez uwierzytelnienia

CVE-2017-5645CRITICAL9.8PL ✓same product

Apache Log4j 2.x — RCE poprzez deserializację zdarzeń przez socket server

CVE-2026-61305HIGH8.3same product

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Suppo...