PT-2026-62257 · Oracle · Oracle Database Server

CVE-2026-60175

·

Published

2026-07-21

·

Updated

2026-08-06

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.31 Oracle Database Server versions 21.3 through 21.22 Oracle Database Server versions 23.4.0 through 23.26.2
Description A flaw in the RDBMS component allows an authenticated attacker with low privileges and network access via Oracle Net to compromise the RDBMS. A successful exploit can lead to a full takeover of the RDBMS.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2026-11643
CVE-2026-60175

Affected Products

Oracle Database Server