EUVD-2026-106838

Vulnerability in Oracle Essbase component: Essbase Web Platform. The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks...

EUVD-2026-106840

Vulnerability in Oracle Essbase component: Essbase Web Platform. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks m...

CVE-2026-91651

A vulnerability exists in the Essbase Web Platform component of Oracle Essbase version 21.8.3.0.0 . This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in a takeover of Oracle Essbase . Due to a scop...

CVE-2026-91653

A vulnerability exists in Oracle Essbase (specifically the Essbase Web Platform component) in version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or the ability to perf...

PT-2025-42984

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.7.3.0.0 Description An issue exists in Oracle Essbase, specifically within the Essbase Web Platform component. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation...

CVE-2025-61763: Improper Access Control

Vulnerability in Oracle Essbase component: Essbase Web Platform. The supported version that is affected is 21.7.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...

Oracle Essbase Multiple Vulnerabilities (October 2022 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in Oracle Essbase component: Build cURL. The supported version that is affecte...