425 matches found
CVE-2026-91656
A vulnerability exists in the Federated Partitions component of Oracle Essbase version 21.8.3.0.0 . A low privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data , unauthorized update...
CVE-2026-91658
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise Oracle Essbase , potentially leading to a full takeover of the system. Due to a scope change , attacks may sign...
CVE-2026-91654
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system. Impact includes unauthorized read access to a subset of data, unauthorized update, insert, or delete acce...
CVE-2026-91655
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized access to critical or complete accessible data. Impact...
CVE-2026-91651
A vulnerability exists in the Essbase Web Platform component of Oracle Essbase version 21.8.3.0.0 . This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in a takeover of Oracle Essbase . Due to a scop...
CVE-2026-91653
A vulnerability exists in Oracle Essbase (specifically the Essbase Web Platform component) in version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or the ability to perf...
CVE-2026-91652
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized read access to a subset of accessible data withi...
CVE-2026-91649
A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with logon access to the infrastructure where Oracle Essbase executes can exploit this vulnerability to compromise the software. Successful exploitation may result in unautho...
CVE-2026-91650
A vulnerability exists in the Java Based Agent component of Oracle Essbase (affected version 21.8.3.0.0 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read access to a...
CVE-2026-91648
A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via TCP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. While specific explo...
CVE-2026-91647
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via TCP to compromise the system. A successful attack can result in a complete takeover of Oracle Essbase . While ...
CVE-2026-91646
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . It allows an unauthenticated attacker with network access via T3 or IIOP to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some data, as well ...
CVE-2026-91645
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. While the specific root...
CVE-2026-91643
A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. The issue is rated ...
CVE-2026-91644
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to critical data or full access to all accessible data, as well ...
CVE-2026-91642
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to a subset of a...
CVE-2026-91641
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope ch...
CVE-2026-91639
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data or provide complete access...
CVE-2026-91640
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope change , ...
CVE-2026-91638
A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Essbase . Due to a scope change , attacks may sign...