Oracle Essbase Web Platform Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability has been identified in Oracle Essbase version 21.7.3.0.0, specifically within the Essbase Web Platform component. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to essential data or complete access to all data accessible within Oracle Essbase.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data within Oracle Essbase, along with the ability to create, delete, or modify data.