CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data.
A vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Essbase accessible data.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can cause a partial denial of service.
A vulnerability in Oracle Essbase (Build component) affecting version 21.8.3.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all Oracle Essbase accessible data.
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Essbase, with potential impact on additional products (scope change). CVSS 3.1 Base Score 9.9.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability in Oracle Essbase (component: Federated Partitions) affecting version 21.8.3.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data, update, insert or delete it, and cause a partial denial of service, with potential impact on additional products (scope change). CVSS 3.1 Base Score 9.1.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data, modify data, and cause partial denial of service. CVSS 9.1.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can perform unauthorized update, insert or delete operations, read a subset of data, and cause a partial denial of service.
Vulnerability in Oracle Essbase (component: Essbase Web Platform) affecting version 21.8.3.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert or delete some Essbase data, with possible impact on additional products.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. A low-privileged attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data, and attacks may significantly impact additional products (scope change).
Vulnerability in Oracle Essbase (component: Essbase Web Platform) affecting version 21.8.3.0.0. A difficult to exploit HTTP attack by a low privileged attacker can lead to takeover of Essbase and impact additional products.
Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).
Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. A high-privileged attacker with logon to the Essbase infrastructure can gain unauthorized access to critical or all Essbase data, with possible impact on additional products.
Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. An unauthenticated attacker with TCP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability in Oracle Essbase (component: Security) affecting version 21.8.3.0.0. A difficult to exploit TCP attack by an unauthenticated attacker can lead to takeover of Essbase.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via T3 or IIOP can perform unauthorized update, insert or delete operations, read a subset of data, and cause a partial denial of service.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability in Oracle Essbase (Security component) affecting version 21.8.3.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and modify data. CVSS 9.3.
Vulnerability in Oracle Essbase (Java Based Agent component) affecting version 21.8.3.0.0. An unauthenticated attacker with HTTP network access can gain unauthorized read access to a subset of Essbase data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS