Security Vulnerability in Oracle Essbase Affects Version 21.8.3.0.0
CVE-2026-91657

4.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Essbase
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91657?

A security vulnerability exists in Oracle Essbase, specifically in the security component, which could be exploited by low-privileged attackers with network access via HTTP. The vulnerability allows unauthorized read access to specific datasets within Oracle Essbase, potentially compromising sensitive information. This issue impacts customers using Oracle Essbase version 21.8.3.0.0. For more details, refer to the Oracle Advisory.

Affected Version(s)

Oracle Essbase 21.8.3.0.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.