VDB
GCVE-110-NCSC-2026-379
GCVE-110-NCSC-2026-379
Advisory PublishedCVSS 7.1/10
A vulnerability in Oracle BI Publisher 12.2.1.4.0 allows a low-privileged attacker with network access via SOAP to gain unauthorized access to critical data, with a CVSS 3.1 base score of 7.7.
Weaknesses (CWE)
CWE-306Missing Authentication for Critical Function
Risk Scores
CVSS 3.1
7.1/10
High · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Oracle | vers:unknown/* | — | — |
Aliases
CVE-2026-83071CVE-2026-83267CVE-2026-83268CVE-2026-83269CVE-2026-83270CVE-2026-83273CVE-2026-83282CVE-2026-83283CVE-2026-83284CVE-2026-83285CVE-2026-83286CVE-2026-83287CVE-2026-83288CVE-2026-83289CVE-2026-83290CVE-2026-83291CVE-2026-83292CVE-2026-83293CVE-2026-83294CVE-2026-83295CVE-2026-83296CVE-2026-83297CVE-2026-83298CVE-2026-83299CVE-2026-83301CVE-2026-83302CVE-2026-83303CVE-2026-83304CVE-2026-83305CVE-2026-83307CVE-2026-83308CVE-2026-83309CVE-2026-83310CVE-2026-83311CVE-2026-83312CVE-2026-83313CVE-2026-83314CVE-2026-83315CVE-2026-83316CVE-2026-83317CVE-2026-83318CVE-2026-83319CVE-2026-83320CVE-2026-83321CVE-2026-83322CVE-2026-83323CVE-2026-83324CVE-2026-83325CVE-2026-83335CVE-2026-83336
References
Browse GCVE Records
406 records in the GCVE database · Updated September 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.