3.7Baja
CVE-2026-91650
Descripción
Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
Debilidad (CWE):
CWE-200
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| oracle | essbase | 21.8.3.0.0 | |
| Oracle Corporation | Oracle Essbase | 21.8.3.0.0 |
Referencias y parches
- Oracle Advisory vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:oracle:essbase:21.8.3.0.0:*:*:*:*:*:*:*