Threats tagged 'ghsa-hq6g-wv4r-xv4r'

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 19.3 through 19.32, 21.3 through 21.23, and 23.4.0 through 23.26.3. This vulnerability allows a low privileged attacker with Execute privilege on DBMS_REDEFINITION and network access via Oracle Net to compromise the database server. Successful exploitation can lead to full takeover of the RDBMS. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.