CVE-2026-91646

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . It allows an unauthenticated attacker with network access via T3 or IIOP to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some data, as well ...

CVE-2026-91645

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. While the specific root...

CVE-2026-91643

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. The issue is rated ...

CVE-2026-91642

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to a subset of a...

CVE-2026-91644

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or full access to all accessible data, as well ...

CVE-2026-91641

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope ch...

CVE-2026-91639

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data or provide complete access...

CVE-2026-91640

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope change , ...

CVE-2026-91638

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Essbase . Due to a scope change , attacks may sign...

CVE-2026-91636

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or full access to all data acce...

CVE-2026-91637

A critical vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to achieve a takeover of the Oracle Essbase system. Due to a scope change , successful exploitation may significantl...

CVE-2026-91634

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. This is categori...

CVE-2026-91632

A vulnerability exists in the Security component of Oracle Essbase (version 21.8.3.0.0 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all acces...

CVE-2026-91631

A vulnerability in the Security component of Oracle Essbase version 21.8.3.0.0 allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized read access to a subset of accessible data within Oracle Essbase, with a potent...

CVE-2026-91633

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a high-privileged attacker with infrastructure access to compromise the system, potentially resulting in unauthorized access to critical data or complete access to all acces...

CVE-2026-91630

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete access to all access...

CVE-2026-91628

A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, specifically affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low-privileged attacker with access to the infrastructure can exploit this vulnerability t...

CVE-2026-91629

The Oracle Communications Billing and Revenue Management product (component: Platform ) is affected by a difficult-to-exploit vulnerability in versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . A low-privileged attacker with infrastructure logon access can compromise the system, pot...

CVE-2026-91625

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is vulnerable in version 6.2.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful exploitati...

CVE-2026-91622

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (Oracle Supply Chain, component: Product Quality Management ) affecting version 6.2.4 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system...