Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22010

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Published

2023-07-18T21:15:12.350

Last Modified

2024-11-21T07:44:05.950

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.2 (LOW)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle essbase 21.4.3.0.0 Yes
References