CVE-2026-101483
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
38/100
Published: 2026-10-20
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Changed
C:
None
I:
None
A:
High
Description
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Oracle Corporation | Oracle Secure Backup | 19.1.0.0.0 |
| Oracle Corporation | Oracle Secure Backup | 19.1.0.1.0 |
References & Advisories (1)
vendor-advisory