CVE-2026-47039: Medium severity Oracle Oracle Database Server (Java VM) vulnerability
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47039?
The severity of CVE-2026-47039 is medium with a CVSS score of 6.5.
How do I fix CVE-2026-47039?
To fix CVE-2026-47039, upgrade to the patched version of Oracle Database Server that addresses this vulnerability.
What are the affected versions of CVE-2026-47039?
The affected versions of CVE-2026-47039 include Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2.
Who can exploit CVE-2026-47039?
CVE-2026-47039 can be exploited by a low privileged attacker who has Create Session privilege and network access through Oracle Net.
What is the impact of CVE-2026-47039?
The impact of CVE-2026-47039 includes a potential compromise of Java in the affected Oracle Database Server.