CVE-2026-101510
MediumCVSS 4.4Summary
Vulnerability in the Oracle Net Services component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. An easily exploitable flaw allows a high-privileged attacker with no special privileges and logon to the infrastructure to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services.
Risk Assessment
An attacker could cause service unavailability, potentially disrupting organizational operations. The risk affects organizations using Oracle Net Services in the listed versions.
Recommendation
Apply the security updates provided by Oracle for Oracle Net Services. Restrict infrastructure access to authorized administrators only.
Other vulnerabilities in Oracle Net Services
See all- CVE-2026-47040Critical
Vulnerability in Oracle Net Services (part of Oracle Database Server) allows an unauthenticated attacker remote access to critical data and can cause a complete denial of service (DOS). CVSS score is 9.1.
- CVE-2026-83350High
Vulnerability in the Oracle Net Services component of Oracle Database Server affecting versions 21.3-21.23 and 23.4.0-23.26.3. An easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to cause a hang or frequently repeatable crash (complete DOS).
- CVE-2026-83349High
Vulnerability in the Oracle Net Services component of Oracle Database Server affecting versions 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. An easily exploitable flaw allows an unauthenticated attacker with network access via Oracle Net to cause a hang or frequently repeatable crash (complete DOS).
- CVE-2026-83347Medium
Vulnerability in the Oracle Net Services component of Oracle Database Server, affecting versions 23.4.0-23.26.3. An unauthenticated attacker with network access via TCPS can exploit it, but human interaction is required. Successful attacks can cause a hang or frequently repeatable crash (complete DoS) of Oracle Net Services.
- CVE-2026-83333High
Vulnerability in the Oracle Net Services component of Oracle Database Server (versions 23.4.0-23.26.3). An unauthenticated attacker with network access via Oracle Net can easily exploit this flaw to cause a hang or frequent crashes (complete DoS) of Oracle Net Services. CVSS 7.5 (Availability impact).
Original NVD description (English source)
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows high privileged attacker having None privilege with logon to the infrastructure where Oracle Net Services executes to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS