Vulnerability Details CVE-2026-47045
Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise JDBC. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of JDBC. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.4%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2026-47045
-
cpe:2.3:a:oracle:database_server:19.10
-
cpe:2.3:a:oracle:database_server:19.11
-
cpe:2.3:a:oracle:database_server:19.12
-
cpe:2.3:a:oracle:database_server:19.13
-
cpe:2.3:a:oracle:database_server:19.14
-
cpe:2.3:a:oracle:database_server:19.15
-
cpe:2.3:a:oracle:database_server:19.16
-
cpe:2.3:a:oracle:database_server:19.17
-
cpe:2.3:a:oracle:database_server:19.18
-
cpe:2.3:a:oracle:database_server:19.19
-
cpe:2.3:a:oracle:database_server:19.20
-
cpe:2.3:a:oracle:database_server:19.21
-
cpe:2.3:a:oracle:database_server:19.22
-
cpe:2.3:a:oracle:database_server:19.23
-
cpe:2.3:a:oracle:database_server:19.27
-
cpe:2.3:a:oracle:database_server:19.28
-
cpe:2.3:a:oracle:database_server:19.3
-
cpe:2.3:a:oracle:database_server:19.4
-
cpe:2.3:a:oracle:database_server:19.5
-
cpe:2.3:a:oracle:database_server:19.6
-
cpe:2.3:a:oracle:database_server:19.7
-
cpe:2.3:a:oracle:database_server:19.8
-
cpe:2.3:a:oracle:database_server:19.9
-
cpe:2.3:a:oracle:database_server:21.11
-
cpe:2.3:a:oracle:database_server:21.12
-
cpe:2.3:a:oracle:database_server:21.13
-
cpe:2.3:a:oracle:database_server:21.14
-
cpe:2.3:a:oracle:database_server:21.18
-
cpe:2.3:a:oracle:database_server:21.19
-
cpe:2.3:a:oracle:database_server:21.3
-
cpe:2.3:a:oracle:database_server:23.26
-
cpe:2.3:a:oracle:database_server:23.4
-
cpe:2.3:a:oracle:database_server:23.8
-
cpe:2.3:a:oracle:database_server:23.9