All packages
Oracle Essbase vulnerabilities
3 known CVE vulnerabilities in Oracle Essbase, translated and rated.
- CVE-2026-70689Critical
Vulnerability in Oracle Essbase (component: Infrastructure) version 21.8.1.0.0. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70688High
Vulnerability in Oracle Essbase (Calculator component) version 21.8.1.0.0. A low privileged attacker with network access via HTTP can take over the system. CVSS 8.8 (Confidentiality, Integrity, Availability impacts).
- CVE-2025-61763High
Vulnerability in Oracle Essbase (Essbase Web Platform component) version 21.7.3.0.0. A low-privileged attacker can access via HTTP to compromise data, including unauthorized creation, deletion, or modification. CVSS 8.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS