CVE-2026-47061: database server from 19.3 (inclusive), through 19.31 (inclusive), from 21.3 (inclusive), through 21.22 (inclusive)…

Affected technology

database server · from 19.3 (inclusive), through 19.31 (inclusive)
oracle

database server · from 21.3 (inclusive), through 21.22 (inclusive)
oracle

database server · from 23.4 (inclusive), through 23.26.2 (inclusive)
oracle

Oracle Database Server · 19.3 through 19.31, 21.3 through 21.22, 23.4.0 through 23.26.2
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · User interaction required

What an attacker can do

Unauthenticated attacker with access to the physical communication segment attached can the hardware where the JDBC executes to compromise JDBC. Vendor/CNA’s CVSS 3.1 assessment (base score 5.6/10) rates confidentiality impact as high; integrity and availability impact as none.