5.3
Medium
CVE-2026-101480 Vulnerability in Oracle Secure Backup (component: NDMP daemon)
Description
Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Secure Backup accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Secure Backup 19.1 | 19.1.0.0.0 → 19.1.0.1.0 | No fix stated |
Other CVEs of Oracle Secure Backup
The 7 CVEs of Oracle Secure Backup →
CVE-2026-101484
Vulnerability in Oracle Secure Backup (component: Backup and Restore)
9.8
Critical
CVE-2026-101483
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
6.5
Medium
CVE-2026-101482
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
7.8
High
CVE-2026-101481
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
8.8
High