Login Request a demo
BI
Product
Business Intelligence
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
98
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities98In the news0Timeline
Severity mix
Critical 6High 41Medium 47Low 4
Severity
All severities98Critical6High41Medium47Low4
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Business Intelligence to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-17530
In wildKEV
9.8
96%
Dec 11
Apache Struts Remote Code Execution Vulnerability
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14864
In wildKEV
7.5
97%
Oct 21
Oracle Business Intelligence Enterprise Edition Path Transversal
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: 5.9.0.0.0
CVE-2022-23305
9.8
67%
Jan 18
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2456
9.8
81%
Jul 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 12.2.1.4.0
CVE-2020-9480
9.8
29%
Jun 23
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret
Affected: 5.5.0.0.0
CVE-2020-2950
9.8
71%
Apr 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2018-8013
9.8
19%
May 24
In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71055
8.8
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 12.2.1.4.0
CVE-2022-23307
8.8
54%
Jan 18
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2022-23302
8.8
64%
Jan 18
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration…
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-60671
8.6
0%
Jul 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2020-14609
8.6
1%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Answers)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2905
8.6
2%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2025-53049
8.4
0%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration)
Affected: 7.6.0.0.0; 8.2.0.0.0
CVE-2026-71095
8.3
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 12.2.1.4.0
CVE-2016-3446
8.3
2%
Jul 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect…
Affected: 11.1.1.7.0; 11.1.1.9.0
CVE-2026-71096
8.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-61302
8.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-60674
8.2
0%
Jul 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2021-2025
8.2
2%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14815
8.2
8%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14690
8.2
1%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2018-3204
8.2
2%
Oct 17
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server)
Affected: 12.2.1.3.0
CVE-2017-10068
8.2
2%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Dashboards)
Affected: 12.2.1.3.0
CVE-2017-10060
8.2
2%
Oct 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General)
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2021-2041
8.1
1%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14626
8.1
2%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71122
8.0
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
CVE-2026-71097
7.8
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
CVE-2026-71056
7.7
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2016-3544
7.6
2%
Jul 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote…
Affected: 11.1.1.7.0; 11.1.1.9.0; 11.2.1.0.0
CVE-2026-71107
7.5
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-71061
7.5
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2022-21421
7.5
2%
Apr 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-30468
7.5
7%
Jun 16
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-22696
7.5
7%
Apr 2
CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-23840
7.5
51%
Feb 16
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17566
7.5
11%
Nov 12
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2900
7.5
2%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71094
7.3
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services)
Affected: 12.2.1.4.0
CVE-2026-71099
7.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers)
Affected: 26.01.0.0.0
CVE-2026-21976
7.1
0%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud)
Affected: 7.6.0.0.0; 8.2.0.0.0
CVE-2020-14843
7.1
1%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14766
7.1
1%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Administration)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2537
7.1
1%
Jan 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71098
7.0
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
CVE-2017-10058
6.9
1%
Aug 8
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Administration)
Affected: 11.1.1.9.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2023-21910
6.5
1%
Apr 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General)
Affected: 6.4.0.0.0; 12.2.1.4.0
Page 1 of 2 · 98 total
12