CERT24CVE-2026-91662 – Improper access control vulnerability in Oracle EssbaseLoading data…
CERT24Threat Observatory
Period

CVE-2026-91662 – Improper access control vulnerability in Oracle Essbase

An improper access control vulnerability exists in the Java Based Agent component of Oracle Essbase. The affected supported version is 21.8.3.0.0. The vulnerability is difficult to exploit, but a low-privileged attacker with logon access to the infrastructure where Oracle Essbase executes may compromise Oracle Essbase.

← Back to intelligence

CVE-2026-91662 – Improper access control vulnerability in Oracle Essbase

An improper access control vulnerability exists in the Java Based Agent component of Oracle Essbase. The affected supported version is 21.8.3.0.0. The vulnerability is difficult to exploit, but a low-privileged attacker with logon access to the infrastructure where Oracle Essbase executes may compromise Oracle Essbase.