CVE-2026-46975

Received Received - Intake

Oracle Database Server RDBMS Unauthorized Data Manipulation

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: Oracle

Description

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS accessible data. CVSS 3.1 Base Score 5.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-46975

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	database_server	From 19.3 (inc) to 19.31 (inc)
oracle	database_server	From 21.3 (inc) to 21.22 (inc)
oracle	database_server	From 23.4.0 (inc) to 23.26.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in the RDBMS component of Oracle Database Server affecting versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. It allows an unauthenticated attacker with network access to potentially modify data in the database.

Impact Analysis

An attacker could exploit this to perform unauthorized updates, inserts, or deletes on data accessible through the RDBMS. This could lead to data corruption, loss of integrity, or unauthorized changes to sensitive information.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized data modifications, which may violate integrity requirements in GDPR and HIPAA. Organizations using affected Oracle Database versions should assess potential exposure.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for your affected Database Server version immediately. Check Oracle's advisory for patches and follow their instructions. Ensure network access controls restrict Oracle Net access to trusted sources only.

Hi! I’m here to help you understand CVE-2026-46975. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70