CVE-2026-60410

Analyzed Analyzed - Analysis Complete

Denial of Service in TimesTen In-Memory Database

Publication date: 2026-07-21

Last updated on: 2026-07-31

Assigner: Oracle

Description

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-31

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-60410

EUVD

EUVD-2026-46812

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	timesten_in-memory_database	26.1.1.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle TimesTen In-Memory Database's Kubernetes Operator component, specifically version 26.1.1.1.0. It allows a low-privileged attacker with network access via HTTPS to cause a partial denial of service (DOS) by exploiting network connectivity.

Detection Guidance

Detection requires checking if TimesTen In-Memory Database version 26.1.1.1.0 is running with Kubernetes Operator enabled. Inspect Kubernetes pods and container logs for TimesTen components. Verify network exposure via HTTPS endpoints.

Impact Analysis

The vulnerability can lead to unauthorized partial denial of service, disrupting database availability. Attackers with network access could reduce system performance or cause outages affecting dependent applications.

Compliance Impact

This vulnerability causes a partial denial of service in the TimesTen In-Memory Database, which could disrupt data availability. For GDPR, this may impact data processing operations requiring timely access. For HIPAA, it could affect the availability of protected health information systems. However, the specific compliance impact depends on implementation and compensating controls.

Mitigation Strategies

Apply Oracle's official patch for TimesTen In-Memory Database version 26.1.1.1.0. Restrict network access to HTTPS endpoints via firewall rules. Limit user privileges to reduce attack surface. Monitor for partial denial of service attempts.

Hi! I’m here to help you understand CVE-2026-60410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70