CVE-2026-60397: Medium severity Oracle Oracle GoldenGate vulnerability
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GoldenGate. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle GoldenGate (Admin Server Executable)to a version that resolves this vulnerability.Fixed in 21.21 - Upgrade
Upgrade
Oracle GoldenGate (Admin Server Executable)to a version that resolves this vulnerability.Fixed in 23.26.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60397?
The severity of CVE-2026-60397 is rated as medium with a score of 4.3.
How do I fix CVE-2026-60397?
To fix CVE-2026-60397, upgrade to a version of Oracle GoldenGate that is not affected, specifically beyond 23.26.1.
Who is affected by CVE-2026-60397?
CVE-2026-60397 affects users of Oracle GoldenGate versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1.
What components are impacted by CVE-2026-60397?
CVE-2026-60397 impacts the Admin Server Executable component of Oracle GoldenGate.
Is CVE-2026-60397 easily exploitable?
Yes, CVE-2026-60397 is considered easily exploitable, allowing unauthenticated attackers access under specific conditions.