Security Flaw in Oracle Essbase by Oracle
CVE-2026-91641

5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Essbase
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91641?

A security vulnerability in Oracle Essbase allows low privileged attackers with network access via HTTP to compromise the system. Though primarily affecting Oracle Essbase version 21.8.3.0.0, the implications of this flaw can extend to other integrated products, resulting in potential unauthorized read access to sensitive data. Organizations using this software should take immediate action to assess their exposure and remediate any risks associated with this vulnerability.

Affected Version(s)

Oracle Essbase 21.8.3.0.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.