CVE-2026-101522: Medium severity Oracle TimesTen In-Memory Database vulnerability

Q: Who is exposed to this vulnerability?

Systems running affected Oracle TimesTen In-Memory Database versions 22.1 through 22.1.1.43.0 are exposed when a low-privileged attacker can log on to the infrastructure where the database executes.

Q: What access does an attacker need to exploit it?

The attacker needs a low-privileged account and logon access to the host infrastructure running Oracle TimesTen In-Memory Database. No user interaction is required.

Q: What is the likely impact of successful exploitation?

Successful exploitation can provide unauthorized access to critical data, potentially including all data accessible to Oracle TimesTen In-Memory Database. The stated impact is confidentiality only; integrity and availability impacts are not listed.

Published Oct 20, 2026

Updated

Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise Oracle TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected Software

1 affected component

Oracle TimesTen In-Memory Database>=22.1<=22.1.1.43.0

Event History

Oct 20, 2026

CVE Published

via MITRE·09:21 PM

Data Sourced

via MITRE·09:21 PM

DescriptionSeverity

Data Sourced

via NVD·10:18 PM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running affected Oracle TimesTen In-Memory Database versions 22.1 through 22.1.1.43.0 are exposed when a low-privileged attacker can log on to the infrastructure where the database executes.

What access does an attacker need to exploit it?

The attacker needs a low-privileged account and logon access to the host infrastructure running Oracle TimesTen In-Memory Database. No user interaction is required.

What is the likely impact of successful exploitation?

Successful exploitation can provide unauthorized access to critical data, potentially including all data accessible to Oracle TimesTen In-Memory Database. The stated impact is confidentiality only; integrity and availability impacts are not listed.

CVE-2026-101522: Medium severity Oracle TimesTen In-Memory Database vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What access does an attacker need to exploit it?

What is the likely impact of successful exploitation?