← Zurück zur CVE-Suche

CVE-2026-60175

Oracle Database Server

Beschreibung

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS 8.8EPSS 0.40299999999999997%Risiko 0.91
Quelle öffnen
Veröffentlicht
2026-07-21 22:17:18
Betroffene Versionen
<=23.26.2
Typ
Kritische Software
Zuletzt geändert
2026-08-06 13:40:16
Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H