CVE-2026-91637

A critical vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to achieve a takeover of the Oracle Essbase system. Due to a scope change , successful exploitation may significantl...

CVE-2026-91636

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or full access to all data acce...

CVE-2026-91634

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. This is categori...

CVE-2026-91635

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may lead to a full takeover of Oracle Essbas...

CVE-2026-91632

A vulnerability exists in the Security component of Oracle Essbase (version 21.8.3.0.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all acces...

CVE-2026-91631

A vulnerability in the Security component of Oracle Essbase version 21.8.3.0.0 allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized read access to a subset of accessible data within Oracle Essbase, with a potent...

CVE-2026-91633

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a high-privileged attacker with infrastructure access to compromise the system, potentially resulting in unauthorized access to critical data or complete access to all acces...

CVE-2026-91630

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all access...

PT-2026-120129

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to a complete takeover of the...

PT-2026-120101

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of the...

PT-2026-120127

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows a low privileged attacker with network access via T3 and IIOP Internet Inter-ORB Protocol to compromise the system. Successful exploitation can lead...

PT-2026-120115

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A flaw in the Essbase Web Platform allows a low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful exploitation can lead to a full takeover of the system and...

PT-2026-120099

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security issue in the Security component allows an unauthenticated attacker with network access via T3 and IIOP Internet Inter-ORB Protocol, a protocol for communication between objects in...

PT-2026-120120

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description An issue exists in the Federated Partitions component that allows a low privileged attacker with network access via HTTP to compromise the system. This flaw can lead to unauthorized access to...

PT-2026-120122

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the software...

PT-2026-120111

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security issue in the Security component allows an unauthenticated attacker with network access via TCP to compromise the system. A successful attack can lead to a full takeover of the software...

PT-2026-120126

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability...

PT-2026-120124

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized...

PT-2026-120125

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may...

PT-2026-120102

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of the...