Security Flaw in Oracle Essbase Web Platform Affects Data Integrity
CVE-2026-91653

8.5HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91653?

Oracle Essbase contains a vulnerability in its web platform that can be exploited by attackers with low privileges and network access via HTTP. This flaw poses a serious risk as it enables unauthorized access to critical data, allowing attackers to read, modify, or delete information within the system. The vulnerability may also extend its impact to other associated products, potentially amplifying the risk across multiple platforms. It is crucial for organizations using Oracle Essbase to implement security measures and patch their systems promptly to mitigate any possible exploitation.

Affected Version(s)

Oracle Essbase 21.8.3.0.0

References

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.