Login Request a demo
ES
Product
Essbase
by Oracle · last CVE Oct 20, 2026
60
CVEs
0
On KEV
9.9
Max CVSS
36
New 30D
Vulnerabilities60In the news0Timeline
Severity mix
Critical 10High 20Medium 25Low 5
Severity
All severities60Critical10High20Medium25Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Essbase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-91663
9.9
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91658
9.9
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91638
9.9
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91637
9.9
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91665
9.8
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-70689
9.8
1%
Aug 18
Vulnerability in Oracle Essbase (component: Infrastructure)
Affected: 21.8.1.0.0
CVE-2021-3711
9.8
88%
Aug 24
SM2 Decryption Buffer Overflow
Affected: before 11.1.2.4.47; 21.1 before 21.3
CVE-2026-91644
9.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91656
9.1
0%
Oct 20
Vulnerability in Oracle Essbase (component: Federated Partitions)
Affected: 21.8.3.0.0
CVE-2026-91655
9.1
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-70688
8.8
0%
Aug 18
Vulnerability in Oracle Essbase (component: Calculator)
Affected: 21.8.1.0.0
CVE-2026-91653
8.5
0%
Oct 20
Vulnerability in Oracle Essbase (component: Essbase Web Platform)
Affected: 21.8.3.0.0
CVE-2026-91651
8.5
0%
Oct 20
Vulnerability in Oracle Essbase (component: Essbase Web Platform)
Affected: 21.8.3.0.0
CVE-2026-91647
8.1
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91635
8.1
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2025-61763
8.1
0%
Oct 21
Vulnerability in Oracle Essbase (component: Essbase Web Platform)
Affected: 21.7.3.0.0
CVE-2021-22901
8.1
64%
Jun 11
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection
Affected: before 11.1.2.4.047; 21.0 before 21.3
CVE-2026-91661
7.7
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91659
7.7
0%
Oct 20
Vulnerability in Oracle Essbase (component: Build)
Affected: 21.8.3.0.0
CVE-2026-91639
7.7
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91636
7.7
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91632
7.7
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91664
7.5
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2021-20718
7.5
3%
May 20
mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors
Affected: before 21.3
CVE-2020-8286
7.5
5%
Dec 14
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response
Affected: 21.2
CVE-2020-8285
7.5
10%
Dec 14
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing
Affected: 21.2
CVE-2020-7760
7.5
5%
Oct 30
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2
Affected: 21.2
CVE-2019-12402
7.5
16%
Aug 30
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs
Affected: 21.2
CVE-2021-3712
7.4
50%
Aug 24
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length
Affected: before 11.1.2.4.047; 21.0 before 21.3; 21.3
CVE-2026-91642
7.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91630
6.8
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91662
6.4
0%
Oct 20
Vulnerability in Oracle Essbase (component: Java Based Agent)
Affected: 21.8.3.0.0
CVE-2026-91654
6.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91649
6.0
0%
Oct 20
Vulnerability in Oracle Essbase (component: Java Based Agent)
Affected: 21.8.3.0.0
CVE-2026-91633
6.0
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: 21.2
CVE-2021-23841
5.9
7%
Feb 16
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…
Affected: 21.2
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 21.2
CVE-2022-21508
5.8
0%
Jul 19
Vulnerability in Oracle Essbase (component: Security and Provisioning)
Affected: 21.3
CVE-2026-91646
5.6
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91648
5.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Java Based Agent)
Affected: 21.8.3.0.0
CVE-2026-91645
5.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2026-91643
5.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Java Based Agent)
Affected: 21.8.3.0.0
CVE-2026-91634
5.3
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
CVE-2023-21944
5.3
1%
Apr 18
Vulnerability in Oracle Essbase (component: Security and Provisioning)
Affected: 21.4
CVE-2023-21943
5.3
1%
Apr 18
Vulnerability in Oracle Essbase (component: Security and Provisioning)
Affected: 21.4
CVE-2023-21942
5.3
1%
Apr 18
Vulnerability in Oracle Essbase (component: Security and Provisioning)
Affected: 21.4
CVE-2021-22897
5.3
4%
Jun 11
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the…
Affected: before 11.1.2.4.047; 21.0 before 21.3
CVE-2021-22876
5.3
5%
Apr 1
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header
Affected: 21.2
CVE-2026-91652
5.0
0%
Oct 20
Vulnerability in Oracle Essbase (component: Security)
Affected: 21.8.3.0.0
Page 1 of 2 · 60 total
12