Login Request a demo
BI
Product
Business Intelligence
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
98
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities98In the news0Timeline
Severity mix
Critical 6High 41Medium 47Low 4
Severity
All severities98Critical6High41Medium47Low4
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Business Intelligence to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14864
In wildKEV
7.5
97%
Oct 21
Oracle Business Intelligence Enterprise Edition Path Transversal
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71055
8.8
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 12.2.1.4.0
CVE-2022-23307
8.8
54%
Jan 18
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2022-23302
8.8
64%
Jan 18
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration…
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-60671
8.6
0%
Jul 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2020-14609
8.6
1%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Answers)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2905
8.6
2%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2025-53049
8.4
0%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration)
Affected: 7.6.0.0.0; 8.2.0.0.0
CVE-2026-71095
8.3
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 12.2.1.4.0
CVE-2016-3446
8.3
2%
Jul 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect…
Affected: 11.1.1.7.0; 11.1.1.9.0
CVE-2026-71096
8.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2026-61302
8.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-60674
8.2
0%
Jul 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2021-2025
8.2
2%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14815
8.2
8%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14690
8.2
1%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2018-3204
8.2
2%
Oct 17
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server)
Affected: 12.2.1.3.0
CVE-2017-10068
8.2
2%
Jan 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Dashboards)
Affected: 12.2.1.3.0
CVE-2017-10060
8.2
2%
Oct 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General)
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2021-2041
8.1
1%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14626
8.1
2%
Jul 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71122
8.0
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
CVE-2026-71097
7.8
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
CVE-2026-71056
7.7
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search)
Affected: 8.2.0.0.0; 12.2.1.4.0; 26.01.0.0.0
CVE-2016-3544
7.6
2%
Jul 21
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 11.2.1.0.0 allows remote…
Affected: 11.1.1.7.0; 11.1.1.9.0; 11.2.1.0.0
CVE-2026-71107
7.5
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2026-71061
7.5
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security)
Affected: 8.2.0.0.0; 26.01.0.0.0
CVE-2022-21421
7.5
2%
Apr 19
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General)
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-30468
7.5
7%
Jun 16
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-22696
7.5
7%
Apr 2
CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-23840
7.5
51%
Feb 16
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable…
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17566
7.5
11%
Nov 12
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes
Affected: 5.5.0.0.0; 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-2900
7.5
2%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71094
7.3
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services)
Affected: 12.2.1.4.0
CVE-2026-71099
7.2
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers)
Affected: 26.01.0.0.0
CVE-2026-21976
7.1
0%
Jan 20
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Oracle Analytics Cloud)
Affected: 7.6.0.0.0; 8.2.0.0.0
CVE-2020-14843
7.1
1%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 5.5.0.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14766
7.1
1%
Oct 21
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Administration)
Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2537
7.1
1%
Jan 15
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-71098
7.0
0%
Aug 18
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security)
Affected: 26.01.0.0.0
Showing 41