PT-2026-3723 · Oracle · Oracle Analytics Cloud+1

Published 2026-01-20 · Updated 2026-01-20 · CVE-2026-21976

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0 through 8.2.0.0.0

Description An easily exploitable issue exists in Oracle Business Intelligence Enterprise Edition, specifically within the Oracle Analytics Cloud component. A low-privileged attacker with access to the system where Oracle Business Intelligence Enterprise Edition is running can compromise the application. Successful exploitation may lead to unauthorized data manipulation, including creation, deletion, or modification of critical data, as well as complete access to all data accessible through Oracle Business Intelligence Enterprise Edition.

Recommendations Update Oracle Business Intelligence Enterprise Edition version 7.6.0.0.0 to a later version. Update Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 to a later version.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-00689

CVE-2026-21976

Affected Products

Oracle Analytics Cloud

Oracle Business Intelligence Enterprise Edition

References · 5

• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21976 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00689 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21976 · Security Note
• https://twitter.com/CVEnew/status/2013740408837197875 · Twitter Post