Security and Provisioning Vulnerability in Oracle Essbase Software

CVE-2022-21508

Summary

A security vulnerability exists in Oracle Essbase's Security and Provisioning component, affecting version 21.3. This flaw allows a high-privileged attacker with valid logon access to exploit the system, enabling unauthorized actions such as the creation, deletion, or modification of critical data. Furthermore, successful exploitation of this vulnerability requires human interaction from an individual other than the attacker. As a result, it poses a significant risk of unauthorized access to sensitive data and could compromise the integrity of all accessible data in Oracle Essbase.

References