Oracle

Essbase

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-70689

  • EPSS 0.49%
  • Veröffentlicht 18.08.2026 21:01:01
  • Zuletzt bearbeitet 20.08.2026 13:06:42

Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successf...

8.8

CVE-2026-70688

  • EPSS 0.45%
  • Veröffentlicht 18.08.2026 21:01:01
  • Zuletzt bearbeitet 20.08.2026 13:06:42

Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful at...

8.1

CVE-2025-61763

  • EPSS 0.25%
  • Veröffentlicht 21.10.2025 20:20:52
  • Zuletzt bearbeitet 24.10.2025 14:27:30

Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.7.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Suc...

2.2

CVE-2023-22010

  • EPSS 0.4%
  • Veröffentlicht 18.07.2023 21:15:12
  • Zuletzt bearbeitet 21.11.2024 07:44:05

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Essba...

5.3

CVE-2023-21944

  • EPSS 0.51%
  • Veröffentlicht 18.04.2023 20:15:15
  • Zuletzt bearbeitet 21.11.2024 07:43:57

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. S...

5.3

CVE-2023-21943

  • EPSS 0.51%
  • Veröffentlicht 18.04.2023 20:15:14
  • Zuletzt bearbeitet 21.11.2024 07:43:57

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. S...

5.3

CVE-2023-21942

  • EPSS 0.51%
  • Veröffentlicht 18.04.2023 20:15:14
  • Zuletzt bearbeitet 21.11.2024 07:43:57

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. S...

5.8

CVE-2022-21508

  • EPSS 0.25%
  • Veröffentlicht 19.07.2022 22:15:09
  • Zuletzt bearbeitet 21.11.2024 06:44:50

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to...

7.4

CVE-2021-3712

Warnung
  • EPSS 50.45%
  • Veröffentlicht 24.08.2021 15:15:09
  • Zuletzt bearbeitet 16.04.2026 15:16:45

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the s...

9.8

CVE-2021-3711

  • EPSS 87.82%
  • Veröffentlicht 24.08.2021 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:22:12

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen...