CVE-2026-101483

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Oracle Secure Backup

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Oracle

Description

Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101483

EUVD

EUVD-2026-105899

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Oracle Secure Backup	19.1.0.0.0
Oracle Corporation	Oracle Secure Backup	19.1.0.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0. It allows a low-privileged attacker with local access to cause a denial of service (DOS) by crashing or hanging the Oracle Secure Backup service. The attack requires only logon access to the system where Oracle Secure Backup runs.

Detection Guidance

This vulnerability is specific to Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 and requires local system access to exploit. Detection should focus on verifying the installed version of Oracle Secure Backup. Check the software version using commands like 'obtool --version' or inspect installed packages via system package managers (e.g., rpm -qa | grep oracle-secure-backup on Linux).

Impact Analysis

If exploited, this vulnerability could disrupt Oracle Secure Backup operations, leading to service outages or crashes. This may affect backup and recovery processes, potentially causing data loss or system downtime for systems relying on Oracle Secure Backup.

Compliance Impact

This vulnerability primarily causes denial-of-service (DOS) conditions in Oracle Secure Backup, which may impact system availability. Compliance impacts depend on the affected system's role in handling regulated data. For GDPR, availability issues could affect data access rights. For HIPAA, downtime may disrupt access to protected health information. However, the CVE does not specify direct data exposure or confidentiality loss.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0. Restrict user access to the infrastructure where Oracle Secure Backup executes to minimize attack surface. Monitor system logs for unusual activity or crashes in Oracle Secure Backup.

Hi! I’m here to help you understand CVE-2026-101483. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...