Threats affecting pkg:maven/com.oracle.database/oracle-jdbc

CVE-2026-47060 is a vulnerability in the JDBC component of Oracle Database Server affecting versions 19.3 through 19.31, 21.3 through 21.22, and 23.4.0 through 23.26.2. It allows an unauthenticated attacker with network access via Oracle Net to compromise JDBC. Successful exploitation requires human interaction from a person other than the attacker. The vulnerability can lead to unauthorized creation, deletion, or modification of critical or all JDBC accessible data. The CVSS 3.1 base score is 6.5, indicating a medium severity with integrity impact only.