Vulnerability in Oracle Essbase Security Component Affects Multiple Versions

CVE-2026-91631

What is CVE-2026-91631?

A security vulnerability has been identified in Oracle Essbase, primarily within its Security component. This flaw can be easily exploited by low-privileged attackers who have network access via HTTP. While the vulnerability is localized to Oracle Essbase, it poses a risk of significantly impacting additional associated products. Successful exploitation may enable unauthorized read access to sensitive data stored within Oracle Essbase, operationalizing potential data breaches. For users and organizations relying on Oracle software, it is crucial to evaluate existing security measures to mitigate potential risks.

References