8.1
Élevée
CVE-2026-61106 Vulnerability in Oracle GoldenGate (component: Config Service Executable)
Description
Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supported versions that are affected are 23.4-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle GoldenGate 23.4 | 23.4 → 23.26.2 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle GoldenGate
Les 17 CVE de Oracle GoldenGate →
CVE-2026-91547
Vulnerability in Oracle GoldenGate (component: Vendor Access Module)
5.5
Moyenne
CVE-2026-91530
Vulnerability in Oracle GoldenGate (component: Admin Client Executable)
4.4
Moyenne
CVE-2026-87351
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
8.8
Élevée
CVE-2026-101601
Vulnerability in Oracle GoldenGate (component: Vendor Access Module)
5.5
Moyenne