CVE-2026-47038

LowCVSS 2.7

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Vulnerability in RDBMS component of Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. Easily exploitable by high-privileged attacker with network access via Oracle Net. Successful attack may lead to unauthorized data modification.

Risk Assessment

Risk of unauthorized data modification in the database by a privileged attacker.

Recommendation

Apply Oracle patch; restrict network access to Oracle Net and monitor high-privileged user activity.

Original NVD description (English source)

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).