PT-2026-29009

CVE-2019-25653

Published

2026-03-30

Updated

2026-04-08

Description by

CVSS 3.1

6.2

Medium

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Navicat for Oracle version 12.1.15

Description Navicat for Oracle version 12.1.15 contains a denial of service issue that allows local attackers to crash the application. This occurs by providing an excessively long string in the password field during Oracle connection configuration. Specifically, pasting a buffer of 550 repeated characters into the password parameter can trigger an application crash.

Recommendations Avoid using excessively long strings in the password parameter during Oracle connection configuration.

Exploitability

Exploit

Fix

Impacts

Researchers

Victor Mondragón

Vendors

Affected products

Weakness enumeration

CWE-620: Unverified Password Change

Related identifiers