CVE-2026-60395 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle GoldenGate, especially those with low-privileged attackers with network access via HTTP, should review and apply Oracle's security patches and implement additional security measures to protect sensitive data. This includes restricting network access to the Admin Server Executable, monitoring for suspicious activity, and verifying inventory of Oracle GoldenGate installations and their versions. Security teams and vulnerability management teams should prioritize this vulnerability given its medium severity and potential impact on sensitive data access.

Technical summary

A vulnerability in Oracle GoldenGate's Admin Server Executable allows low-privileged attackers with network access via HTTP to compromise Oracle GoldenGate and gain unauthorized read access to a subset of accessible data. The CVSS score is 4.3, indicating a medium severity vulnerability. This vulnerability affects Oracle GoldenGate versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. It is recommended to review and apply Oracle's security patches for Oracle GoldenGate and implement additional security measures to protect sensitive data.

Defensive priority

Medium priority given the CVSS score of 4.3 and the potential for unauthorized read access to Oracle GoldenGate data.

Recommended defensive actions

• Review and apply Oracle's security patches for Oracle GoldenGate
• Restrict network access to the Admin Server Executable
• Monitor for suspicious activity and implement compensating controls
• Verify inventory of Oracle GoldenGate installations and their versions
• Implement additional security measures to protect sensitive data

Evidence notes

The evidence from the NVD and Oracle indicates a vulnerability in Oracle GoldenGate's Admin Server Executable, allowing low-privileged attackers with network access via HTTP to compromise Oracle GoldenGate and gain unauthorized read access to a subset of accessible data. Further review of system logs and monitoring for suspicious activity is recommended to verify the integrity of affected systems. Additionally, defenders should verify inventory of Oracle GoldenGate installations and their versions, and implement additional security measures to protect sensitive data.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.