ES
Product
Essbase
60
CVEs
0
On KEV
9.9
Max CVSS
36
New 30D
Severity mix
Critical 10High 20Medium 25Low 5
Watch
Add Essbase to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91641 | 5.0 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91640 | 5.0 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91631 | 5.0 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91660 | 4.3 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91657 | 4.3 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91650 | 3.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Java Based Agent) Affected: 21.8.3.0.0 |
| CVE-2021-22890 | 3.7 | Apr 1 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets Affected: 21.2 |
| CVE-2020-8284 | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: 21.2 |
| CVE-2021-22898 | 3.1 | Jun 11 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content… Affected: before 11.1.2.4.047; 21.0 before 21.3 |
| CVE-2023-22010 | 2.2 | Jul 18 | Vulnerability in Oracle Essbase (component: Security and Provisioning) Affected: 21.4.3.0.0 |