Security Vulnerability in Oracle Essbase Affects Sensitive Data Access
CVE-2026-91630

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Essbase
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91630?

The vulnerability in Oracle Essbase involves improper input validation, allowing an attacker with high privileges and network access via HTTP to exploit the system. This weakness grants the attacker the capability to compromise Oracle Essbase, which could lead to unauthorized access to sensitive data and potentially grant complete access to all data the Essbase platform holds. The exploitation of this vulnerability underscores the importance of maintaining diligent security practices and applying timely patches to safeguard critical business information.

Affected Version(s)

Oracle Essbase 21.8.3.0.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.