Dashboard / CVE-2026-47045

CVE-2026-47045

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 49/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of JDBC. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle database_server 19.3 – 19.31

References & Advisories (1)

Bug Bounty Relevance

49 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

6.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.40%
Raw Score 0.003980
Percentile 33.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00398
2026-10-28
0.00398

Intelligence Sources

nvd ref →

External Links