CVE-2026-46975: Medium severity Oracle Oracle Database Server vulnerability
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS accessible data. CVSS 3.1 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46975?
The severity of CVE-2026-46975 is classified as medium, with a score of 5.8.
How do I fix CVE-2026-46975?
To address CVE-2026-46975, users should apply the latest patches released by Oracle for the affected versions of the Oracle Database Server.
Who is affected by CVE-2026-46975?
CVE-2026-46975 affects users of Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2.
What kind of attack can exploit CVE-2026-46975?
CVE-2026-46975 can be exploited by an unauthenticated attacker with network access via Oracle Net to compromise the RDBMS.
What versions of Oracle Database Server are vulnerable to CVE-2026-46975?
The vulnerable versions of Oracle Database Server related to CVE-2026-46975 include 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2.