CVE-2026-34191

The Apache Portable Runtime Utility (affected versions 1.6.0 through 1.6.3) is vulnerable to an SQL Injection flaw within the apr_dbd_oracle provider. The vulnerability is caused by the improper neutralization of special elements used in an SQL command. This issue has been addressed in various di...

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...

The vulnerability of the Oracle ODBC driver of the Oracle Database Server allows a hacker to execute arbitrary code.

The vulnerability of the Oracle ODBC driver of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page or file...

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...