{"id":"CVE-2026-91545","kind":"vulnerability","aliases":["CVE-2026-91545"],"related":[],"title":"Oracle Business Intelligence: Platform Security flaw allows full takeover after user action","description":"Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).  Supported versions that are affected are 8.2.0.0.0 and  12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).","summary":"Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 contain a flaw in the Platform Security component. An attacker who already has logon access to the host running the product, and who gets a person to take an action, can take over the Business Intelligence installation.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["oracle-analytics","oracle-bi","self-hosted","vendor"],"not_affected_if":["no-local-logon","other-versions"],"how_to_check":"- Confirm the installed release of Oracle Business Intelligence Enterprise Edition against `8.2.0.0.0` and `12.2.1.4.0`\n- Check the Oracle Critical Patch Update advisory listed for CVE-2026-91545 for the affected build list\n- unknown for any other check, the sources do not say","fix":"- Apply the Oracle Critical Patch Update fix for Oracle Business Intelligence Enterprise Edition, the sources do not name the patched version\n- unknown for configuration changes, the sources do not say","status":"open","published_at":"2026-10-20T22:20:57+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:08:31+00:00","updated_at":"2026-10-25T03:08:31+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:08:31Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update fix for Oracle Business Intelligence Enterprise Edition, the sources do not name the patched version\n- unknown for configuration changes, the sources do not say","reach":"local","title":"Oracle Business Intelligence: Platform Security flaw allows full takeover after user action","impact":"high","summary":"Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 contain a flaw in the Platform Security component. An attacker who already has logon access to the host running the product, and who gets a person to take an action, can take over the Business Intelligence installation.","category":"vendor","nicknames":[],"who_cares":["oracle-bi","oracle-analytics","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker takes over the Business Intelligence installation and its data","analyst_note":"Check the Oracle Critical Patch Update advisory and the NVD entry for the patched version and the exact affected component details.","how_to_check":"- Confirm the installed release of Oracle Business Intelligence Enterprise Edition against `8.2.0.0.0` and `12.2.1.4.0`\n- Check the Oracle Critical Patch Update advisory listed for CVE-2026-91545 for the affected build list\n- unknown for any other check, the sources do not say","needs_analyst":true,"not_affected_if":["other-versions","no-local-logon"],"who_is_affected":"Teams running Oracle Business Intelligence Enterprise Edition at the affected versions, especially hosts where local users or processes can log on. The sources describe the attack as needing a logon to the infrastructure and a human action by someone other than the attacker, so exposure is lower for installations that are not reachable by local accounts. Teams not running these versions can skip it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000691,"input_tokens":3534,"output_tokens":675,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-91545':15A,18A '/av':165C '12.2.1.4.0':37B,98C '3.1':152C,164C '7.8':155C '8.2.0.0.0':35B,96C 'access':52B 'action':12A,67B 'affect':94C 'allow':7A,102C 'alreadi':49B 'analyt':21B,86C 'attack':47B,104C,125C,135C,137C 'avail':159C 'base':153C 'bi':24B 'busi':2A,30B,72B,79C,112C,120C,147C 'compon':45B,87C 'compromis':118C 'confidenti':156C 'contain':38B 'cve':13A,16A 'cvss':151C,161C,163C 'easili':99C 'edit':33B,82C,115C,123C,150C 'enterpris':32B,81C,114C,122C,149C 'execut':116C 'exploit':100C 'flaw':6A,40B 'full':8A 'get':61B 'h':173C 'h/a':172C 'h/i':171C 'host':27B,55B 'human':127C 'impact':160C 'infrastructur':109C 'instal':74B 'integr':157C 'intellig':3A,31B,73B,80C,113C,121C,148C 'interact':128C 'l/ac':166C 'l/pr':167C 'logon':51B,106C 'n/ui':168C 'oracl':1A,20B,23B,29B,78C,85C,111C,119C,146C 'oracle-analyt':19B 'oracle-bi':22B 'person':63B,131C 'platform':4A,43B,88C 'product':58B,83C 'r/s':169C 'requir':126C 'result':142C 'run':56B 'score':154C 'secur':5A,44B,89C 'self':26B 'self-host':25B 'success':124C,136C 'support':90C 'take':65B,69B 'takeov':9A,144C 'u/c':170C 'unauthent':103C 'user':11A 'vector':162C 'vendor':28B 'version':34B,91C 'vulner':75C,101C,140C","nicknames":[],"mitigations":[],"who_affected":"Teams running Oracle Business Intelligence Enterprise Edition at the affected versions, especially hosts where local users or processes can log on. The sources describe the attack as needing a logon to the infrastructure and a human action by someone other than the attacker, so exposure is lower for installations that are not reachable by local accounts. Teams not running these versions can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91545","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91545","severity":null,"published_at":"2026-10-20T22:20:57+00:00","modified_at":"2026-10-21T18:44:55+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}