CVE-2026-70688

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

Vulnerability in Oracle Essbase (Calculator component) version 21.8.1.0.0. A low privileged attacker with network access via HTTP can take over the system. CVSS 8.8 (Confidentiality, Integrity, Availability impacts).

Risk Assessment

Risk includes complete takeover of Oracle Essbase, potentially leading to breach of analytical data and service disruption.

Recommendation

Apply Oracle patches, restrict HTTP access, and control user privileges.

Original NVD description (English source)

Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).