Security Flaw in Oracle Essbase Affects Data Integrity
CVE-2026-91633

6MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91633?

A significant security vulnerability exists in Oracle Essbase that can be exploited by high-privileged attackers who have access to the infrastructure where the software operates. This flaw allows attackers to compromise the system, leading to unauthorized access to sensitive data and potentially complete access to all data that Oracle Essbase can reach. While the primary concern is with Oracle Essbase itself, the ramifications of successful exploits can extend to other associated products, raising significant data integrity concerns. Organizations should prioritize immediate patching and review security protocols to mitigate risks.

Affected Version(s)

Oracle Essbase 21.8.3.0.0

References

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.