Threats tagged 'ghsa-h33w-pj96-qw6p'

A vulnerability exists in the Oracle XML Developers Kit component of Oracle Database Server affecting versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. The flaw requires an attacker with low privileges and the XDKC privilege to exploit it via network access through Oracle Net. Successful exploitation can lead to complete takeover of the Oracle XML Developers Kit component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update, which includes numerous security patches across many products. Oracle strongly recommends applying these patches promptly to mitigate the risk.