CVE-2021-35651

Name of the Vulnerable Software and Affected Versions: Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3

Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Essbase Administration Services, potentially impacting additional products. Successful attacks can result in unauthorized access to critical data, complete access to all Essbase Administration Services accessible data, as well as unauthorized update, insert, or delete access to some of the accessible data.

Recommendations: For Oracle Essbase versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For Oracle Essbase versions prior to 21.3, update to version 21.3 or later.