CVE-2023-22010

4 documents4 sources
Severity
2.2LOW
EPSS
0.2%
top 51.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 18

Description

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:NExploitability: 0.7 | Impact: 1.4

Affected Packages2 packages

NVDoracle/essbase21.4.3.0.0

Patches

🔴Vulnerability Details

2
CVEList
CVE-2023-22010: Vulnerability in Oracle Essbase (component: Security and Provisioning)2023-07-18
GHSA
GHSA-hfx5-8g8x-xrp8: Vulnerability in Oracle Essbase (component: Security and Provisioning)2023-07-18

📋Vendor Advisories

1
Oracle
Oracle Oracle Essbase Risk Matrix: Security and Provisioning — CVE-2023-220102023-07-15
CVE-2023-22010 (LOW CVSS 2.2) | Vulnerability in Oracle Essbase (co | cvebase.io