Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 03:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

149-75% vs 7-day avg of 597

2 critical, 41 high, 60 medium, 26 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Critical	9.8	CVE-2026-91665	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91665Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.5	CVE-2026-91664	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91664Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Essbase. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.9	CVE-2026-91663	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91663Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.4	CVE-2026-91662	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91662Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.7	CVE-2026-91661	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91661Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	4.3	CVE-2026-91660	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91660Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). Impact if exploited ConfidentialityNone IntegrityNone AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.7	CVE-2026-91659	Vulnerability in Oracle Essbase (component: Build) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91659Vulnerability in Oracle Essbase (component: Build) From the advisory Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.9	CVE-2026-91658	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91658Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	4.3	CVE-2026-91657	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91657Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.1	CVE-2026-91656	Vulnerability in Oracle Essbase (component: Federated Partitions) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91656Vulnerability in Oracle Essbase (component: Federated Partitions) From the advisory Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.1	CVE-2026-91655	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91655Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.3	CVE-2026-91654	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91654Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as unauthorized read access to a subset of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.5	CVE-2026-91653	Vulnerability in Oracle Essbase (component: Essbase Web Platform) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91653Vulnerability in Oracle Essbase (component: Essbase Web Platform) From the advisory Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.0	CVE-2026-91652	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91652Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.5	CVE-2026-91651	Vulnerability in Oracle Essbase (component: Essbase Web Platform) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91651Vulnerability in Oracle Essbase (component: Essbase Web Platform) From the advisory Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Low	3.7	CVE-2026-91650	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91650Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	6.0	CVE-2026-91649	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91649Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.3	CVE-2026-91648	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91648Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	8.1	CVE-2026-91647	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91647Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of Oracle Essbase. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.6	CVE-2026-91646	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91646Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as unauthorized read access to a subset of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L). Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.3	CVE-2026-91645	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91645Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Critical	9.3	CVE-2026-91644	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91644Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data as well as unauthorized update, insert or delete access to some of Oracle Essbase accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N). Impact if exploited ConfidentialityHigh IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.3	CVE-2026-91643	Vulnerability in Oracle Essbase (component: Java Based Agent) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91643Vulnerability in Oracle Essbase (component: Java Based Agent) From the advisory Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	High	7.3	CVE-2026-91642	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91642Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Essbase accessible data as well as unauthorized read access to a subset of Oracle Essbase accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Essbase. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory
	Medium	5.0	CVE-2026-91641	Vulnerability in Oracle Essbase (component: Security) Oracle CorporationOracle Corporation Oracle Essbase	NVD	Oct 20 22:21 UTC
CVE-2026-91641Vulnerability in Oracle Essbase (component: Security) From the advisory Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N Affects Oracle Corporation Oracle Corporation Oracle Essbase NIST National Vulnerability DatabasePublished Oct 20, 2026 22:21 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited