CVE-2026-47022

Analyzed Analyzed - Analysis Complete

Denial of Service in Oracle GoldenGate Stream Analytics

Publication date: 2026-07-21

Last updated on: 2026-08-06

Assigner: Oracle

Description

Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). The supported version that is affected is 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where GoldenGate Stream Analytics executes to compromise GoldenGate Stream Analytics. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of GoldenGate Stream Analytics. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-08-06

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-47022

EUVD

EUVD-2026-46510

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	goldengate_stream_analytics	26.1.0.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle GoldenGate Stream Analytics version 26.1.0.0.0. It allows a low-privileged attacker with local access to cause a partial denial of service (DOS) to the application. The attack requires logon to the infrastructure where the software runs.

Detection Guidance

This vulnerability is specific to Oracle GoldenGate Stream Analytics version 26.1.0.0.0 and requires local system access to exploit. Detection should focus on verifying the installed version of GoldenGate Stream Analytics and checking for unauthorized access or partial denial of service events in the application logs.

Impact Analysis

If exploited, this vulnerability could disrupt the availability of GoldenGate Stream Analytics, leading to partial service outages. It does not allow data theft or unauthorized access beyond causing downtime.

Compliance Impact

This vulnerability causes a partial denial of service in GoldenGate Stream Analytics, which could disrupt data processing and availability. While it does not directly lead to data breaches, prolonged unavailability may impact compliance with GDPR or HIPAA by delaying access to critical data or processing operations.

Mitigation Strategies

Apply the latest security patches or updates provided by Oracle for GoldenGate Stream Analytics version 26.1.0.0.0. Restrict user privileges to minimize access to the infrastructure where GoldenGate Stream Analytics executes. Monitor system logs for unusual activity or partial denial of service attempts.

Hi! I’m here to help you understand CVE-2026-47022. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70