CVE-2026-60397
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Jul 21, 2026
CISA due date
—
The record
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle GoldenGate executes to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GoldenGate. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121261 A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. CWE-404
- CVE-2026-120237 A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-120234 A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-120235 A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. CWE-404
- CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404