{"schema_version":1,"title":"Oracle Essbase vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 38 vulnerabilities in Oracle Essbase: 0 in the last 7 days and 37 in the last 90 days, 9 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91665, was published on 20 October 2026. 35 vulnerabilities in the last four weeks, up from none in the four before. 8 critical against 0.","url":"https://junglewise.ai/threats/technologies/essbase","json_url":"https://junglewise.ai/threats/technologies/essbase.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/essbase","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":13,"all_time":38,"critical":9,"exploited":0,"last_7_days":0,"last_30_days":35,"last_90_days":37,"last_365_days":37},"latest":[{"cve":"CVE-2026-91665","cvss":9.8,"slug":"cve-2026-91665-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthenticated remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.96+00:00","url":"https://junglewise.ai/threats/cve-2026-91665-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91664","cvss":7.5,"slug":"cve-2026-91664-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase denial of service in Security component","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:06.847+00:00","url":"https://junglewise.ai/threats/cve-2026-91664-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91663","cvss":9.9,"slug":"cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation in Security component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.723+00:00","url":"https://junglewise.ai/threats/cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91662","cvss":6.4,"slug":"cve-2026-91662-vulnerability-in-oracle-essbase-component-java-based-agent-the","title":"Oracle Essbase privilege escalation in Java Based Agent","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:06.61+00:00","url":"https://junglewise.ai/threats/cve-2026-91662-vulnerability-in-oracle-essbase-component-java-based-agent-the"},{"cve":"CVE-2026-91661","cvss":7.7,"slug":"cve-2026-91661-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase authentication bypass in security component","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:06.493+00:00","url":"https://junglewise.ai/threats/cve-2026-91661-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91660","cvss":4.3,"slug":"cve-2026-91660-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase denial of service in Security component","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:06.383+00:00","url":"https://junglewise.ai/threats/cve-2026-91660-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91659","cvss":7.7,"slug":"cve-2026-91659-vulnerability-in-oracle-essbase-component-build-the-supported","title":"Oracle Essbase privilege escalation via HTTP in Build component","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:06.263+00:00","url":"https://junglewise.ai/threats/cve-2026-91659-vulnerability-in-oracle-essbase-component-build-the-supported"},{"cve":"CVE-2026-91658","cvss":9.9,"slug":"cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.15+00:00","url":"https://junglewise.ai/threats/cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91657","cvss":4.3,"slug":"cve-2026-91657-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthorized data access in Security component","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:06.037+00:00","url":"https://junglewise.ai/threats/cve-2026-91657-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91656","cvss":9.1,"slug":"cve-2026-91656-vulnerability-in-oracle-essbase-component-federated-partitions","title":"Oracle Essbase privilege escalation in Federated Partitions","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:05.92+00:00","url":"https://junglewise.ai/threats/cve-2026-91656-vulnerability-in-oracle-essbase-component-federated-partitions"},{"cve":"CVE-2026-91655","cvss":9.1,"slug":"cve-2026-91655-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:05.803+00:00","url":"https://junglewise.ai/threats/cve-2026-91655-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91654","cvss":6.3,"slug":"cve-2026-91654-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation in Security component","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:05.683+00:00","url":"https://junglewise.ai/threats/cve-2026-91654-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91653","cvss":8.5,"slug":"cve-2026-91653-vulnerability-in-oracle-essbase-component-essbase-web-platform","title":"Oracle Essbase privilege escalation in Web Platform","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:05.567+00:00","url":"https://junglewise.ai/threats/cve-2026-91653-vulnerability-in-oracle-essbase-component-essbase-web-platform"},{"cve":"CVE-2026-91652","cvss":5,"slug":"cve-2026-91652-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase information disclosure in Security component","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:05.463+00:00","url":"https://junglewise.ai/threats/cve-2026-91652-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91651","cvss":8.5,"slug":"cve-2026-91651-vulnerability-in-oracle-essbase-component-essbase-web-platform","title":"Oracle Essbase privilege escalation in Web Platform","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:05.35+00:00","url":"https://junglewise.ai/threats/cve-2026-91651-vulnerability-in-oracle-essbase-component-essbase-web-platform"},{"cve":"CVE-2026-91649","cvss":6,"slug":"cve-2026-91649-vulnerability-in-oracle-essbase-component-java-based-agent-the","title":"Oracle Essbase privilege escalation in Java Based Agent","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:05.123+00:00","url":"https://junglewise.ai/threats/cve-2026-91649-vulnerability-in-oracle-essbase-component-java-based-agent-the"},{"cve":"CVE-2026-91648","cvss":5.3,"slug":"cve-2026-91648-vulnerability-in-oracle-essbase-component-java-based-agent-the","title":"Oracle Essbase unauthenticated information disclosure in Java Based Agent","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:05.017+00:00","url":"https://junglewise.ai/threats/cve-2026-91648-vulnerability-in-oracle-essbase-component-java-based-agent-the"},{"cve":"CVE-2026-91647","cvss":8.1,"slug":"cve-2026-91647-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase security vulnerability in authentication component","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:04.9+00:00","url":"https://junglewise.ai/threats/cve-2026-91647-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91646","cvss":5.6,"slug":"cve-2026-91646-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase authentication bypass in T3 and IIOP","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:04.787+00:00","url":"https://junglewise.ai/threats/cve-2026-91646-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91645","cvss":5.3,"slug":"cve-2026-91645-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthorized information disclosure via HTTP","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:04.663+00:00","url":"https://junglewise.ai/threats/cve-2026-91645-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91644","cvss":9.3,"slug":"cve-2026-91644-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthenticated network access vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:04.543+00:00","url":"https://junglewise.ai/threats/cve-2026-91644-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91643","cvss":5.3,"slug":"cve-2026-91643-vulnerability-in-oracle-essbase-component-java-based-agent-the","title":"Oracle Essbase unauthorized read access in Java Based Agent","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:04.43+00:00","url":"https://junglewise.ai/threats/cve-2026-91643-vulnerability-in-oracle-essbase-component-java-based-agent-the"},{"cve":"CVE-2026-91642","cvss":7.3,"slug":"cve-2026-91642-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthenticated data access and denial of service","severity":"high","exploited":false,"published_at":"2026-10-20T22:21:04.31+00:00","url":"https://junglewise.ai/threats/cve-2026-91642-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91641","cvss":5,"slug":"cve-2026-91641-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase Security unauthorized data access","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:04.19+00:00","url":"https://junglewise.ai/threats/cve-2026-91641-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91640","cvss":5,"slug":"cve-2026-91640-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthorized read access in security component","severity":"medium","exploited":false,"published_at":"2026-10-20T22:21:04.073+00:00","url":"https://junglewise.ai/threats/cve-2026-91640-vulnerability-in-oracle-essbase-component-security-the-supported"}],"weekly":[{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":8,"exploited":0,"vulnerabilities":35},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Oracle MySQL Server","slug":"mysql-server","vulnerabilities":163,"url":"https://junglewise.ai/threats/technologies/mysql-server"},{"name":"Oracle Hyperion Financial Management","slug":"hyperion-financial-management","vulnerabilities":142,"url":"https://junglewise.ai/threats/technologies/hyperion-financial-management"},{"name":"Oracle Helidon","slug":"helidon","vulnerabilities":130,"url":"https://junglewise.ai/threats/technologies/helidon"},{"name":"Oracle MySQL Cluster","slug":"mysql-cluster","vulnerabilities":129,"url":"https://junglewise.ai/threats/technologies/mysql-cluster"},{"name":"Oracle Coherence","slug":"coherence","vulnerabilities":113,"url":"https://junglewise.ai/threats/technologies/coherence"},{"name":"Oracle E-Business Suite","slug":"e-business-suite","vulnerabilities":110,"url":"https://junglewise.ai/threats/technologies/e-business-suite"},{"name":"Oracle WebCenter Content","slug":"webcenter-content","vulnerabilities":110,"url":"https://junglewise.ai/threats/technologies/webcenter-content"},{"name":"Oracle Commerce Guided Search","slug":"commerce-guided-search","vulnerabilities":104,"url":"https://junglewise.ai/threats/technologies/commerce-guided-search"},{"name":"Oracle Commerce Experience Manager","slug":"commerce-experience-manager","vulnerabilities":102,"url":"https://junglewise.ai/threats/technologies/commerce-experience-manager"},{"name":"Oracle JD Edwards EnterpriseOne Tools","slug":"jd-edwards-enterpriseone-tools","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools"},{"name":"Oracle PeopleSoft Enterprise PeopleTools","slug":"peopletools","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/peopletools"},{"name":"Oracle Java SE","slug":"java-se","vulnerabilities":92,"url":"https://junglewise.ai/threats/technologies/java-se"}],"technology":{"hub":true,"name":"Oracle Essbase","slug":"essbase","vendor":{"hub":true,"name":"Oracle","slug":"oracle","url":"https://junglewise.ai/threats/vendors/oracle"},"aliases":[],"category":"financial-planning-software","description":"Oracle multi-dimensional database and analytics engine for financial planning and business analysis.","url":"https://junglewise.ai/threats/technologies/essbase"},"most_severe":[{"cve":"CVE-2026-91663","cvss":9.9,"slug":"cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation in Security component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.723+00:00","url":"https://junglewise.ai/threats/cve-2026-91663-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91658","cvss":9.9,"slug":"cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.15+00:00","url":"https://junglewise.ai/threats/cve-2026-91658-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91638","cvss":9.9,"slug":"cve-2026-91638-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase security vulnerability in authentication component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:03.817+00:00","url":"https://junglewise.ai/threats/cve-2026-91638-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91637","cvss":9.9,"slug":"cve-2026-91637-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation in Security component","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:03.693+00:00","url":"https://junglewise.ai/threats/cve-2026-91637-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-70689","cvss":9.8,"epss":0.0051,"slug":"cve-2026-70689-oracle-essbase-unauthenticated-remote-code-execution-in","title":"Oracle Essbase unauthenticated remote code execution in Infrastructure","severity":"critical","exploited":false,"published_at":"2026-08-18T21:17:20.887+00:00","url":"https://junglewise.ai/threats/cve-2026-70689-oracle-essbase-unauthenticated-remote-code-execution-in"},{"cve":"CVE-2026-91665","cvss":9.8,"slug":"cve-2026-91665-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthenticated remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:06.96+00:00","url":"https://junglewise.ai/threats/cve-2026-91665-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91644","cvss":9.3,"slug":"cve-2026-91644-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase unauthenticated network access vulnerability","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:04.543+00:00","url":"https://junglewise.ai/threats/cve-2026-91644-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-91656","cvss":9.1,"slug":"cve-2026-91656-vulnerability-in-oracle-essbase-component-federated-partitions","title":"Oracle Essbase privilege escalation in Federated Partitions","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:05.92+00:00","url":"https://junglewise.ai/threats/cve-2026-91656-vulnerability-in-oracle-essbase-component-federated-partitions"},{"cve":"CVE-2026-91655","cvss":9.1,"slug":"cve-2026-91655-vulnerability-in-oracle-essbase-component-security-the-supported","title":"Oracle Essbase privilege escalation via HTTP","severity":"critical","exploited":false,"published_at":"2026-10-20T22:21:05.803+00:00","url":"https://junglewise.ai/threats/cve-2026-91655-vulnerability-in-oracle-essbase-component-security-the-supported"},{"cve":"CVE-2026-70688","cvss":8.8,"epss":0.0043,"slug":"cve-2026-70688-vulnerability-in-oracle-essbase-component-calculator-the","title":"Vulnerability in Oracle Essbase (component: Calculator). The supported version that is affected is 21.8.1.0.0. Easily…","severity":"high","exploited":false,"published_at":"2026-08-18T21:17:20.763+00:00","url":"https://junglewise.ai/threats/cve-2026-70688-vulnerability-in-oracle-essbase-component-calculator-the"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}