Oracle Essbase Administration Services vulnerabilities

7 CVEs affecting Oracle Essbase Administration Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-35683, published 2022-01-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2021-35652, published 2021-10-20. Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily…
CVE-2021-35654, published 2021-10-20. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily…
CVE-2021-35653, published 2021-10-20. High severity, CVSS 7.7. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily…
CVE-2021-35683, published 2022-01-19. Critical severity, CVSS 9.9. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable…
CVE-2021-35655, published 2021-10-20. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily…
CVE-2021-35651, published 2021-10-20. High severity, CVSS 8.5. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to 11.1.2.4.046 and Prior to 21.3. Easily…