Oracle GoldenGate vulnerabilities

Vulnerability in Oracle GoldenGate (Vendor Access Module component) affects versions 21.3-21.23. An easily exploitable local attack by a low-privileged user with logon to the infrastructure can result in unauthorized access to critical data or complete access to all GoldenGate data.

Vulnerability in Oracle GoldenGate (Vendor Access Module component) affecting versions 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. A low-privileged attacker with logon access to the infrastructure can gain unauthorized access to critical data. CVSS 5.5.

Vulnerability in Oracle GoldenGate (Admin Client Executable component) affecting versions 23.4–23.26.2.0.0. A high-privileged attacker with network access via HTTP can, under difficult conditions, gain unauthorized access to critical data or all data accessible in Oracle GoldenGate.

Vulnerability in Oracle GoldenGate (component: Admin Server Executable) affects versions 19.1.0.0.0-19.32.0.0, 21.3-21.23, and 23.4-23.26.3.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.

Vulnerability in Oracle GoldenGate (Config Service Executable component) versions 23.4-23.26.2. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.

Vulnerability in Oracle GoldenGate (component: Libraries) in versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.2. A low-privileged attacker with local access can gain unauthorized read and write access to some data.

Vulnerability in Oracle GoldenGate (component: Libraries). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. High privileged attacker with logon and human interaction can gain full data access, modify data, or cause DOS.

Vulnerability in Oracle GoldenGate (Libraries component) allows a low-privileged attacker with local access to easily take over the application.

Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Affected versions are 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTPS to compromise Oracle GoldenGate.

Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. A low-privileged attacker with network access via HTTP can cause a complete denial of service (complete DOS).

Vulnerability in Oracle GoldenGate (Oracle GoldenGate Microservices component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1 are affected.

Vulnerability in Oracle GoldenGate (Admin Server Executable) versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. Easily exploitable by an unauthenticated attacker with access to the physical communication segment. Successful attack may cause partial denial of service. CVSS 4.3 (Availability impacts).

Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Affected versions are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to take over the system.

In Oracle GoldenGate (versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.1), there is an easily exploitable vulnerability in the Admin Server component. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.

Vulnerability in Oracle GoldenGate (Admin Server Executable). An unauthenticated attacker with network access via HTTPS can read a subset of data.

Vulnerability in Oracle GoldenGate (component: Service Manager) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.

Vulnerability in Oracle GoldenGate (component: Libraries) affecting versions 23.4-23.10. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized read access to a subset of Oracle GoldenGate accessible data.