VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 21, 2026· Updated Jul 31, 2026

CVE-2026-60394

CVE-2026-60394

Description

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GoldenGate accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products

2
  • Oracle Corporation/Goldengate2 versions
    cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*range: >=21.3.0,<=21.21.0.0.0
    • (no CPE)range: 21.3-21.21, 23.4-23.26.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.