8.8
High
CVE-2026-101481 Vulnerability in Oracle Secure Backup (component: Device Management and Support)
Description
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Secure Backup 19.1 | 19.1.0.0.0 → 19.1.0.1.0 | No fix stated |
Other CVEs of Oracle Secure Backup
The 7 CVEs of Oracle Secure Backup →
CVE-2026-101484
Vulnerability in Oracle Secure Backup (component: Backup and Restore)
9.8
Critical
CVE-2026-101483
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
6.5
Medium
CVE-2026-101480
Vulnerability in Oracle Secure Backup (component: NDMP daemon)
5.3
Medium
CVE-2026-101482
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
7.8
High