Threats affecting pkg:maven/com.oracle.database/oracle-text

A vulnerability exists in the Oracle Text component of Oracle Database Server affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. It requires the attacker to have Create Index privilege and network access via Oracle Net. Successful exploitation can lead to takeover of Oracle Text and impact additional products. The vulnerability has a high CVSS score of 8.5, indicating significant confidentiality, integrity, and availability impacts. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.