Security Flaw in Oracle Essbase Affects User Data Access

CVE-2023-21944

Summary

A security vulnerability has been identified in Oracle Essbase, specifically within its Security and Provisioning component. This flaw affects version 21.4 and enables unauthenticated attackers with network access via HTTP to potentially compromise the system. Although the attack is difficult to execute and requires human interaction from a non-attacker, the implications can be severe, allowing unauthorized access to critical data or even complete access to all data accessible through Oracle Essbase.

References