CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91563

A vulnerability exists in the Oracle OLAP component of Oracle Database Server , specifically affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with DBMS_AW privileges and network access via Oracle Net can exploit this to compromise and potentially take ov...

CVE-2026-91503

A vulnerability exists in the VPD component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with Create Table privileges and network access via Oracle Net can exploit this flaw to compromise the VPD. Successful exploitation may...

CVE-2026-91499

The RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ) is vulnerable to a high-severity security flaw. A low-privileged attacker possessing DBMS_VECTOR privileges and network access via Oracle Net can exploit this vulnerability to compromise the RDBMS, potentially leadi...

CVE-2026-91479

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ). An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this flaw to compromise the RDBMS. Successful exploitation can lead to a ...

CVE-2026-73964

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 19.3-19.32 and 21.3-21.23 ). A high-privileged attacker with Query Optimizer privileges and network access via Oracle Net can exploit this issue to compromise the RDBMS. Successful exploitation may lead to ...

CVE-2026-101512

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the RDBMS. Successful exploitation may lead to unauthorized access to critical data or comp...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

Oracle Database Server (September 2026 CSPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and...

Java VM Oracle Database Server Compromise

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

Oracle Database Server Unauthorized Access

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-83349

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services...

CVE-2026-83348

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network access via Oracle Net to compromise RDBM...

CVE-2026-83351

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result i...

CVE-2026-83160

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

CVE-2026-83088

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the...

EUVD-2026-79704

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result i...

CVE-2026-83351

CVE-2026-83351 affects the RDBMS component of Oracle Database Server , versions 23.4.0 through 23.26.3 . An unauthenticated attacker with network access via Oracle Net can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Successful exploitation can ...

EUVD-2026-79703

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful...