Product by Oracle
Oracle Essbase
61 known vulnerabilities in Oracle Essbase (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
61
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-3711 | SM2 Decryption Buffer Overflow | 9.8 | |
| High | CVE-2021-22901 | Https://github.com/curl/curl: Use After Free | 8.1 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| High | CVE-2019-12402 | Apache Commons Compress: Infinite Loop | 7.5 | |
| High | CVE-2020-8285 | Https://github.com/curl/curl: Uncontrolled Recursion | 7.5 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| High | CVE-2020-8286 | Https://github.com/curl/curl: Improper Certificate Validation | 7.5 | |
| Medium | CVE-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 5.9 | |
| High | CVE-2021-20718 | ZmartZone Mod Auth Openidc: Denial of Service | 7.5 | |
| Medium | CVE-2020-1971 | EDIPARTYNAME NULL pointer dereference | 5.9 | |
| High | CVE-2020-7760 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| Medium | CVE-2021-22876 | Https://github.com/curl/curl: Exposure of Private Personal Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2021-22897 | Https://github.com/curl/curl: Business Logic Errors | 5.3 | |
| Critical | CVE-2026-91665 | Oracle Essbase: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2026-91638 | Oracle Essbase: Improper Access Control | 9.9 | |
| Critical | CVE-2026-70689 | Oracle Essbase: Improper Access Control | 9.8 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Critical | CVE-2026-91637 | Oracle Essbase: Improper Access Control | 9.9 | |
| Critical | CVE-2026-91663 | Oracle Essbase: Improper Access Control | 9.9 | |
| Critical | CVE-2026-91658 | Oracle Essbase: Improper Access Control | 9.9 | |
| Low | CVE-2020-8284 | Https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor | 3.7 | |
| Low | CVE-2021-22898 | Https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor | 3.1 | |
| Medium | CVE-2021-22890 | Https://github.com/curl/curl: Channel Accessible by Non-Endpoint | 3.7 | |
| High | CVE-2026-70688 | Oracle Essbase: Improper Access Control | 8.8 | |
| Critical | CVE-2026-91644 | Oracle Essbase: security vulnerability | 9.3 |