CVE-2026-47022

LowCVSS 3.3

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

A vulnerability in GoldenGate Stream Analytics (component: Security) version 26.1.0.0.0. A low privileged attacker with local access can cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 3.3 (Availability).

Risk Assessment

An attacker with local access can disrupt GoldenGate Stream Analytics, causing partial service unavailability.

Recommendation

Apply the patch provided by Oracle for GoldenGate Stream Analytics. Restrict local access to the server.

Original NVD description (English source)

Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). The supported version that is affected is 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where GoldenGate Stream Analytics executes to compromise GoldenGate Stream Analytics. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of GoldenGate Stream Analytics. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).