ORACLE-CVE-2026-33871

Vulnerability Description:

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Platform (Netty)). Supported versions that are affected are 14.5.0-14.8.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management.Vulnerability Description:

Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate (component: Third Party (Netty)). Supported versions that are affected are 21.3-21.20 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle GoldenGate Big Data and Application Adapters. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GoldenGate Big Data and Application Adapters. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).Vulnerability Description:

Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security (Netty)). The supported version that is affected is 26.1.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where GoldenGate Stream Analytics executes to compromise GoldenGate Stream Analytics. While the vulnerability is in GoldenGate Stream Analytics, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of GoldenGate Stream Analytics accessible data. CVSS 3.1 Base Score 3.2 (Confidentiality impacts). CVSS Vector:...