PT-2026-62257

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an authenticated attacker with low...

CVE-2026-47038: Missing Authentication for Critical Function

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise RDBMS...

PT-2026-62199

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw exists in the RDBMS component of the Oracle Database Server. A high...

PT-2026-62221

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the JDBC component allows an unauthenticated attacker with acces...

CVE-2026-61211: Improper Access Control

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Execute DBMSCLOUD privilege with network access via Oracle Net to compromise RDBMS. While...

PT-2026-62206

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with network access via Oracle Net to compromise the system. This can lead to a complete Denial of Service DOS ...

PT-2026-62144

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows an unauthenticated attacker with...

CVE-2026-47039: Improper Access Control

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Ja...

CVE-2026-47045: URL Redirection to Untrusted Site

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successf...

PT-2026-63090

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the RDBMS component allows a low privileged attacker with network access via Oracle Net and the Execute DBMS CLOUD...

CVE-2026-46975: Improper Access Control

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. While the vulnerability is i...

PT-2026-62220

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the JDBC component allows an unauthenticated attacker with netwo...

PT-2026-62205

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw exists in the JDBC component of the Oracle Database Server. A high...

PT-2026-62201

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2 Description A flaw in the Oracle Net Services component allows an unauthenticated...

CVE-2026-47060: Improper Access Control

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful attacks require hum...

CVE-2026-47046: Uncontrolled Resource Consumption

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in...

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

SummaryA SQL injection vulnerability in the Oracle path of FilterEngine.createsqlaquery allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint GET /dids//dids/search. Attacker-controlled filter keys and values are interpolated...

PT-2026-53597

Summary A SQL injection vulnerability in the Oracle path of FilterEngine.create sqla query allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint GET /dids//dids/search. Attacker-controlled filter keys and values are interpolated...

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain unauthorized access to the device.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device via network packets...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...