CVE-2026-60397: goldengate from 19.1.0.0.0 (inclusive), through 19.30.0.0 (inclusive), from 21.3.0 (inclusive), through 21.21.0.0.0…

Affected technology

goldengate · from 19.1.0.0.0 (inclusive), through 19.30.0.0 (inclusive)
oracle

goldengate · from 21.3.0 (inclusive), through 21.21.0.0.0 (inclusive)
oracle

goldengate · from 23.4 (inclusive), through 23.26.1.0.0 (inclusive)
oracle

Oracle GoldenGate · 19.1.0.0.0 through 19.30.0.0, 21.3 through 21.21, 23.4 through 23.26.1
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Unauthenticated attacker with access to the physical communication segment attached can the hardware where the Oracle GoldenGate executes to compromise Oracle GoldenGate. Vendor/CNA’s CVSS 3.1 assessment (base score 4.3/10) rates confidentiality and integrity impact as none; availability impact as low.