p PatchFirst

CVE-2026-73964

CVE-2026-73964

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

CVSS 2.7 · Low · EPSS 0.3%

Published
Updated

Affected products and versions

  • oracle database server

    Versions
    • ≥ 19.3, ≤ 19.32: Affected (custom)
    • ≥ 21.3, ≤ 21.23: Affected (custom)

    No fix published

Original sources

Check your server →