Login Request a demo
BI
Product
Business Intelligence
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
98
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities98In the news0Timeline
Severity mix
Critical 6High 41Medium 47Low 4
Severity
All severities98Critical6High41Medium47Low4
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Business Intelligence to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2715
6.5
1%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: BI Platform Security)
Affected: 12.2.1.2.0; 12.2.1.3.0
CVE-2019-2897
6.4
1%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2017-10163
6.3
1%
Oct 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General)
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2025-30759
6.1
0%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 7.6.0.0.0; 8.2.0.0.0; 12.2.1.4.0
CVE-2022-21492
6.1
1%
Apr 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server)
Affected: 5.9.0.0.0
CVE-2022-21448
6.1
1%
Apr 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer)
Affected: 5.9.0.0.0
CVE-2022-21419
6.1
1%
Apr 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer)
Affected: 5.5.0.0.0; 5.9.0.0.0
CVE-2020-13954
6.1
41%
Nov 12
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-14862
6.1
2%
Jan 2
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with…
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2016-7103
6.1
29%
Mar 15
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2016-0479
6.1
1%
Apr 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.0.0
CVE-2021-45105
5.9
100%
Dec 18
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Affected: 5.5.0.0.0
CVE-2021-23841
5.9
7%
Feb 16
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2023-21965
5.7
1%
Apr 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0
CVE-2023-21952
5.7
1%
Apr 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0
CVE-2022-21609
5.7
1%
Oct 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server)
Affected: 5.9.0.0.0
CVE-2024-21139
5.4
0%
Jul 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers)
Affected: 7.0.0.0.0; 7.6.0.0.0; 12.2.1.4.0
CVE-2024-21064
5.4
0%
Apr 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers)
Affected: 7.0.0.0.0; 12.2.1.4.0
CVE-2024-21001
5.4
0%
Apr 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 7.0.0.0.0
CVE-2024-20913
5.4
0%
Feb 17
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 12.2.1.4.0
CVE-2023-22082
5.4
0%
Oct 17
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2023-22061
5.4
0%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer)
Affected: 6.4.0.0.0
CVE-2023-22020
5.4
0%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2023-22011
5.4
0%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2023-21892
5.4
0%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer)
Affected: 5.9.0.0.0; 6.4.0.0.0
CVE-2023-21891
5.4
0%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer)
Affected: 5.9.0.0.0; 6.4.0.0.0
CVE-2023-21861
5.4
0%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer)
Affected: 5.9.0.0.0; 6.4.0.0.0
CVE-2021-2191
5.4
1%
Apr 22
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2003
5.4
1%
Jan 20
Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2016-3433
5.4
1%
Jul 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users…
Affected: 11.1.1.7.0; 11.1.1.9.0
CVE-2016-0468
5.4
1%
Apr 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.0.0
CVE-2019-3012
5.3
2%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2024-20904
5.0
0%
Jan 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin)
Affected: 6.4.0.0.0; 12.2.1.4.0
CVE-2021-2005
4.7
1%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2535
4.7
1%
Jan 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2023-22109
4.6
0%
Oct 17
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Dashboards)
Affected: 6.4.0.0.0; 7.0.0.0.0; 12.2.1.4.0
CVE-2024-21099
4.3
0%
Apr 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization)
Affected: 7.0.0.0.0
CVE-2023-22027
4.3
1%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 7.0.0.0.0
CVE-2023-22021
4.3
1%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2023-22013
4.3
0%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 6.4.0.0.0; 7.0.0.0.0
CVE-2023-22012
4.3
0%
Jul 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 7.0.0.0.0
CVE-2021-2152
4.0
1%
Apr 22
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-23839
3.7
3%
Feb 16
OpenSSL 1.0.2 supports SSLv2
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14548
3.4
1%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2605
3.4
1%
Apr 23
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Web Catalog)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2531
3.1
1%
Jan 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security)
Affected: 12.2.1.3.0; 12.2.1.4.0
Page 2 of 2 · 98 total
12