PT-2026-62257

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an authenticated attacker with low...

PT-2026-62144

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with...

CVE-2026-47039: Improper Access Control

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Ja...

CVE-2026-61211: Improper Access Control

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMSCLOUD privilege with network access via Oracle Net to compromise RDBMS. While...

CVE-2026-47045: URL Redirection to Untrusted Site

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successf...

PT-2026-62206

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with network access via Oracle Net to compromise the system. This can lead to a complete Denial of Service DOS ...

PT-2026-62220

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the JDBC component allows an unauthenticated attacker with netwo...

PT-2026-62201

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the Oracle Net Services component allows an unauthenticated...

CVE-2026-60666: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via Oracle Net to compromise PeopleSoft Enterprise...

CVE-2026-47046: Uncontrolled Resource Consumption

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in...

CVE-2026-47060: Improper Access Control

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful attacks require hum...

CVE-2026-35229

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability...

Oracle Database Server Net Service 安全漏洞

Oracle Database Server Net Service is a database network communication and connection management service component provided by Oracle Corporation in the United States. Vulnerabilities exist in versions 23.4.0 to 23.26.2 of Oracle Database Server Net Service. These vulnerabilities stem from issues...

PT-2026-37345

Name of the Vulnerable Software and Affected Versions Agent 2 affected versions not specified Description A user capable of connecting to Agent 2 can inject an Oracle TNS connection string through the 'service' parameter. This allows the software to connect to a server controlled by an attacker,...

Oracle Database Server Java VM Component Data Disclosure Vulnerability

Oracle Database Server is a relational database management system with a Java VM component that supports running Java programs in the database. A data disclosure vulnerability exists in Oracle Database Server. The vulnerability arises from a failure of the Java VM component to properly handle a...

CVE-2026-35229

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability...

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system with a Java VM component that supports running Java programs in the database. A data disclosure vulnerability exists in Oracle Database Server. The vulnerability arises from a failure of the Java VM component to properly handle a...

CVE-2026-35229: Improper Access Control

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability...

CVE-2026-21977

Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance component: Security. Supported versions that are affected are 23.1.0-23.1.202509. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2026-21977

Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance component: Security. Supported versions that are affected are 23.1.0-23.1.202509. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...