A vulnerability in the Security component of Oracle Essbase allows an unauthenticated attacker with network access to the T3 and IIOP ports to compromise the database. Successful exploitation can lead to full takeover, resulting in complete loss of confidentiality, integrity, and availability of the Essbase instance. The weakness is indicated by the lack of authentication required to initiate the attack, reflecting a severe compromise of access controls.

The affected product is Oracle Essbase version 21.8.3.0.0 from Oracle Corporation. No other versions or products are listed as affected in the CNA data.

The CVSS v3.1 base score of 8.1 classifies this as a high‑severity flaw. EPSS indicates a very low exploitation probability (<1%). The lack of a KEV listing implies no public exploits are currently known. Although the vulnerability can be triggered from any host with network reachability to the T3/IIOP interfaces, the very low EPSS score suggests that exploitation is unlikely at present. The high impact ensures that if exploitation occurs, it would result in significant loss of confidentiality, integrity, and availability.