p PatchFirst

CVE-2026-87351

CVE-2026-87351

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS 8.8 · High · EPSS 0.4%

Published
Updated

Affected products and versions

  • oracle goldengate

    Versions
    • ≥ 19.1.0.0.0, ≤ 19.32.0.0: Affected (custom)
    • ≥ 21.3, ≤ 21.23: Affected (custom)
    • ≥ 23.4, ≤ 23.26.3.0.0: Affected (custom)

    No fix published

Original sources

Check your server →