CVE-2026-21999

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise XML Database. Successful attacks require human interaction...

CVE-2026-21999

...

CVE-2026-21999

CVE-2026-21999 affects the XML Database component of Oracle Database Server. Affected versions: 23.4.0–23.26.1. The vulnerability can be exploited by an unauthenticated attacker over HTTPS with network access, but requires human interaction. Impact: potential unauthorized access to all XML Databa...