CVE-2026-71099

HighCVSS 7.2

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

Vulnerability in Oracle Business Intelligence Enterprise Edition (component: Analytics Web Answers). Affects version 26.01.0.0.0. Easily exploitable, allows high-privileged attacker via HTTP to take over system. CVSS 7.2.

Risk Assessment

High-privileged attacker can fully compromise BI system, risking confidentiality, integrity, and availability of analytics data.

Recommendation

Install Oracle patches for version 26.01.0.0.0. Restrict network access and monitor privileged user activities.

Original NVD description (English source)

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).