Essbase (Oracle) - vulnerabilities (CVEs)

61 CVEs, 36 in the last 30 days, 10 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Essbase

CVE-2026-91665 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91662 - CVSS 6.4 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…
CVE-2026-91664 - CVSS 7.5 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91663 - CVSS 9.9 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91661 - CVSS 7.7 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91660 - CVSS 4.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91659 - CVSS 7.7 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91658 - CVSS 9.9 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91657 - CVSS 4.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91656 - CVSS 9.1 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…
CVE-2026-91655 - CVSS 9.1 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91654 - CVSS 6.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91652 - CVSS 5 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91651 - CVSS 8.5 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability…
CVE-2026-91653 - CVSS 8.5 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability…
CVE-2026-91649 - CVSS 6 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91648 - CVSS 5.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91650 - CVSS 3.7 (low), 2026-10-20: Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…
CVE-2026-91646 - CVSS 5.6 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…
CVE-2026-91645 - CVSS 5.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91647 - CVSS 8.1 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…
CVE-2026-91642 - CVSS 7.3 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91644 - CVSS 9.3 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91643 - CVSS 5.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91639 - CVSS 7.7 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91641 - CVSS 5 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91640 - CVSS 5 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91636 - CVSS 7.7 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91638 - CVSS 9.9 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91637 - CVSS 9.9 (critical), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91635 - CVSS 8.1 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows…
CVE-2026-91634 - CVSS 5.3 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows…
CVE-2026-91633 - CVSS 6 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…
CVE-2026-91632 - CVSS 7.7 (high), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91631 - CVSS 5 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low…
CVE-2026-91630 - CVSS 6.8 (medium), 2026-10-20: Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high…
CVE-2026-70689 - CVSS 9.8 (critical), 2026-08-18: Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows…
CVE-2026-70688 - CVSS 8.8 (high), 2026-08-18: Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low…
CVE-2025-61763 - CVSS 8.1 (high), 2025-10-21: Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.7.3.0.0. Easily exploitable vulnerability…
CVE-2023-22010 - CVSS 2.2 (low), 2023-07-18: Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit…
CVE-2023-21944 - CVSS 5.3 (medium), 2023-04-18: Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability…
CVE-2023-21942 - CVSS 5.3 (medium), 2023-04-18: Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability…
CVE-2023-21943 - CVSS 5.3 (medium), 2023-04-18: Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability…
CVE-2022-21508 - CVSS 5.8 (medium), 2022-07-19: Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. Easily exploitable vulnerability…
CVE-2021-3711 - CVSS 9.8 (critical), 2021-08-24: In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this…
CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
CVE-2021-22901 - CVSS 8.1 (high), 2021-06-11: curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over…
CVE-2021-22898 - CVSS 3.1 (low), 2021-06-11: curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send…
CVE-2021-22897 - CVSS 5.3 (medium), 2021-06-11: curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is…
CVE-2021-20718 - CVSS 7.5 (high), 2021-05-20: mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.
CVE-2021-22876 - CVSS 5.3 (medium), 2021-04-01: curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP…
CVE-2021-22890 - CVSS 4.3 (medium), 2021-04-01: curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session…
CVE-2021-3449 - CVSS 5.9 (medium), 2021-03-25: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits…
CVE-2021-23841 - CVSS 5.9 (medium), 2021-02-16: The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained…
CVE-2020-8286 - CVSS 7.5 (high), 2020-12-14: curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8285 - CVSS 7.5 (high), 2020-12-14: curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2020-8284 - CVSS 3.7 (low), 2020-12-14: A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way…
CVE-2020-1971 - CVSS 5.9 (medium), 2020-12-08: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a…
CVE-2020-7760 - CVSS 7.5 (high), 2020-10-30: This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2019-12402 - CVSS 7.5 (high), 2019-08-30: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted…