Essbase vulnerabilities

22 known vulnerabilities in Essbase from Oracle. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

22vulnerabilities

9critical

13high

0exploited

8.6average CVSS score

Latest first

9.8 Critical severity
Oracle Essbase: Improper Authentication
CVE-2026-91665Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this v
7.5 High severity
Oracle Essbase: Uncontrolled Resource Consumption
CVE-2026-91664Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this v
9.9 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91663Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase. While the vulnerability
7.7 High severity
Oracle Essbase: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-91661Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
7.7 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91659Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in O
9.9 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91658Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
9.1 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91656Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulner
9.1 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91655Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
8.5 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91653Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulner
8.5 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91651Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vuln
8.1 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91647Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this
9.3 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91644Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is
7.3 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91642Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this
7.7 High severity
Oracle Essbase: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-91639Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
9.9 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91638Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
9.9 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-91637Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
7.7 High severity
Oracle Essbase: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-91636Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
8.1 High severity
Oracle Essbase: Improper Access Control
CVE-2026-91635Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase. Successful attacks of
7.7 High severity
Oracle Essbase: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-91632Oct 20, 2026Oracle
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is i
9.8 Critical severity
Oracle Essbase: Improper Access Control
CVE-2026-70689Aug 18, 2026Oracle
Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of
8.8 High severity
Oracle Essbase: Improper Access Control
CVE-2026-70688Aug 18, 2026Oracle
Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this
8.1 High severity
Oracle Essbase: Improper Access Control
CVE-2025-61763Oct 21, 2025Oracle
Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.7.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attac