essbase vulnerabilities and fixes

Recent CVEs affecting essbase, with upgrade or downgrade steps. 38 tracked.

essbase has 38 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-10-20. Highest priority: CVE-2026-70689 (score 53/100).

CVE-2026-91630 MEDIUM 6.8 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91631 MEDIUM 5.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91633 MEDIUM 6.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91634 MEDIUM 5.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91635 HIGH 8.1 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91636 HIGH 7.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91638 CRITICAL 9.9 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91647 HIGH 8.1 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91657 MEDIUM 4.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91658 CRITICAL 9.9 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91659 HIGH 7.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Build)
CVE-2026-91660 MEDIUM 4.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91661 HIGH 7.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91662 MEDIUM 6.4 DOWNGRADE Vulnerability in Oracle Essbase (component: Java Based Agent)
CVE-2026-91663 CRITICAL 9.9 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91664 HIGH 7.5 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91653 HIGH 8.5 DOWNGRADE Vulnerability in Oracle Essbase (component: Essbase Web Platform)
CVE-2026-91652 MEDIUM 5.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91651 HIGH 8.5 DOWNGRADE Vulnerability in Oracle Essbase (component: Essbase Web Platform)
CVE-2026-91650 LOW 3.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Java Based Agent)
CVE-2026-91649 MEDIUM 6.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Java Based Agent)
CVE-2026-91648 MEDIUM 5.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Java Based Agent)
CVE-2026-91646 MEDIUM 5.6 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91645 MEDIUM 5.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91644 CRITICAL 9.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91643 MEDIUM 5.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Java Based Agent)
CVE-2026-91642 HIGH 7.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91641 MEDIUM 5.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91640 MEDIUM 5.0 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91639 HIGH 7.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91654 MEDIUM 6.3 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91655 CRITICAL 9.1 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91637 CRITICAL 9.9 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91632 HIGH 7.7 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-91656 CRITICAL 9.1 DOWNGRADE Vulnerability in Oracle Essbase (component: Federated Partitions)
CVE-2026-91665 CRITICAL 9.8 DOWNGRADE Vulnerability in Oracle Essbase (component: Security)
CVE-2026-70689 CRITICAL 9.8 DOWNGRADE Vulnerability in Oracle Essbase (component: Infrastructure)
CVE-2026-70688 HIGH 8.8 DOWNGRADE Vulnerability in Oracle Essbase (component: Calculator)

FAQ

How do I fix essbase vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is essbase being exploited right now?

None of the tracked essbase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which essbase CVE should I patch first?

CVE-2026-70689 currently ranks highest (53/100): Vulnerability in Oracle Essbase (component: Infrastructure).

← Back to latest CVEs