CVE-2023-22010

Summary

CVE-2023-22010 is a vulnerability affecting Oracle Essbase version 21.4.3.0.0 in its Security and Provisioning component. This issue allows a high privileged attacker with network access to compromise Oracle Essbase through HTTP. Successful exploitation leads to unauthorized read access to a subset of the affected system's data, with potential confidentiality impacts. The CVSS Base Score is 2.2. Attackers must have network access and high privileges to exploit this vulnerability, making it difficult to exploit in practice.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.