ES
Product
Essbase
60
CVEs
0
On KEV
9.9
Max CVSS
36
New 30D
Severity mix
Critical 10High 20Medium 25Low 5
Watch
Add Essbase to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70688 | 8.8 | Aug 18 | Vulnerability in Oracle Essbase (component: Calculator) Affected: 21.8.1.0.0 |
| CVE-2026-91653 | 8.5 | Oct 20 | Vulnerability in Oracle Essbase (component: Essbase Web Platform) Affected: 21.8.3.0.0 |
| CVE-2026-91651 | 8.5 | Oct 20 | Vulnerability in Oracle Essbase (component: Essbase Web Platform) Affected: 21.8.3.0.0 |
| CVE-2026-91647 | 8.1 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91635 | 8.1 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2025-61763 | 8.1 | Oct 21 | Vulnerability in Oracle Essbase (component: Essbase Web Platform) Affected: 21.7.3.0.0 |
| CVE-2021-22901 | 8.1 | Jun 11 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection Affected: before 11.1.2.4.047; 21.0 before 21.3 |
| CVE-2026-91661 | 7.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91659 | 7.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Build) Affected: 21.8.3.0.0 |
| CVE-2026-91639 | 7.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91636 | 7.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91632 | 7.7 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2026-91664 | 7.5 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
| CVE-2021-20718 | 7.5 | May 20 | mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors Affected: before 21.3 |
| CVE-2020-8286 | 7.5 | Dec 14 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response Affected: 21.2 |
| CVE-2020-8285 | 7.5 | Dec 14 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing Affected: 21.2 |
| CVE-2020-7760 | 7.5 | Oct 30 | This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2 Affected: 21.2 |
| CVE-2019-12402 | 7.5 | Aug 30 | The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs Affected: 21.2 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: before 11.1.2.4.047; 21.0 before 21.3; 21.3 |
| CVE-2026-91642 | 7.3 | Oct 20 | Vulnerability in Oracle Essbase (component: Security) Affected: 21.8.3.0.0 |
Showing 20