8.8
Élevée
CVE-2026-60157 Vulnerability in Oracle GoldenGate (component: Service Manager)
Description
Vulnerability in Oracle GoldenGate (component: Service Manager). Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and 23.4-23.26.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle GoldenGate 23.4 | 23.4 → 23.26.1.0.0 | Pas de correctif indiqué |
| Oracle GoldenGate 21.3 | 21.3 → 21.21 | Pas de correctif indiqué |
| Oracle GoldenGate 19.1 | 19.1.0.0.0 → 19.29.0.0 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle GoldenGate
Les 17 CVE de Oracle GoldenGate →
CVE-2026-91547
Vulnerability in Oracle GoldenGate (component: Vendor Access Module)
5.5
Moyenne
CVE-2026-91530
Vulnerability in Oracle GoldenGate (component: Admin Client Executable)
4.4
Moyenne
CVE-2026-87351
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
8.8
Élevée
CVE-2026-101601
Vulnerability in Oracle GoldenGate (component: Vendor Access Module)
5.5
Moyenne