This vulnerability in Oracle GoldenGate's libraries allows a high privileged attacker who already has logon access to the infrastructure to potentially compromise Oracle GoldenGate. Exploitation requires human interaction from a third party. The impact includes unauthorized access to critical or all accessible data, unauthorized update, insert, or delete operations on some data, and the ability to cause hangs or repeated crashes (denial of service). The CVSS vector indicates the attack requires local access (AV:L), high attack complexity (AC:H), high privileges (PR:H), and user interaction (UI:R). Confidentiality impact is high, integrity impact is low, and availability impact is high. The affected versions explicitly include 19.1.0.0.0 to 19.30.0.0, 21.3 to 21.21, and 23.4 to 23.26.2. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not provide a direct patch link or remediation level, implying patch status is not confirmed in the advisory.

Successful exploitation can result in unauthorized access to critical or all Oracle GoldenGate accessible data, unauthorized modification (update, insert, delete) of some data, and denial of service conditions causing application hangs or crashes. The vulnerability requires a high privileged attacker with local access and user interaction, limiting remote exploitation. The CVSS score of 5.8 reflects medium severity with significant confidentiality and availability impacts and limited integrity impact.

Oracle's advisory strongly recommends that customers remain on actively-supported versions and apply Critical Patch Updates without delay. However, the July 2026 Critical Patch Update advisory does not explicitly confirm a patch or fix for this specific vulnerability. Therefore, patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Until a patch is available, limit high privileged access to the infrastructure where Oracle GoldenGate executes and educate users to avoid unintended interactions that could facilitate exploitation.