CVE-2023-21944: 
Oracle Essbase vulnerability analysis and mitigation

Vulnerability in Oracle Essbase (component: Security and Provisioning) version 21.4 identified as CVE-2023-21944. This vulnerability allows unauthenticated attackers with network access via HTTP to potentially compromise Oracle Essbase. The vulnerability was disclosed in Oracle's April 2023 Critical Patch Update (Oracle CPU).

The vulnerability is classified as difficult to exploit and requires human interaction from a person other than the attacker. It has been assigned a CVSS 3.1 Base Score of 5.3 (Confidentiality impacts) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N (Oracle CPU).

Successful exploitation of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Essbase accessible data. The impact is primarily focused on confidentiality, with no direct effects on integrity or availability (Oracle CPU).

The vulnerability is considered difficult to exploit and requires human interaction for successful exploitation. It can be accessed remotely via HTTP protocol but requires specific conditions to be met for successful exploitation (Oracle CPU).

Oracle has released patches for this vulnerability as part of the April 2023 Critical Patch Update. Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible to address this vulnerability (Oracle CPU).