CVE-2026-101485
MediumCVSS 6.5Summary
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affecting versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or all accessible data, and the attack may impact additional products.
Risk Assessment
An attacker with local access can gain access to critical data, potentially compromising confidentiality and affecting related systems.
Recommendation
Update Oracle Autonomous Health Framework to a version outside the 26.3-26.8 range per Oracle guidance. Restrict logon privileges to the infrastructure.
Other vulnerabilities in Oracle Autonomous Health Framework
See all- CVE-2026-101478High
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
- CVE-2026-101477High
Vulnerability in Oracle Autonomous Health Framework (Trace File Analyzer component) versions 26.3-26.8. An easily exploitable local attack by a low-privileged attacker can lead to takeover of Oracle Autonomous Health Framework.
- CVE-2026-101452High
Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay) affects versions 26.3-26.8. A low-privileged attacker with logon to the infrastructure can compromise the framework.
- CVE-2026-70734High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A high-privileged attacker with local access can exploit it with user interaction, potentially leading to unauthorized data modification and complete denial of service.
- CVE-2026-70731High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker with local access can compromise integrity and availability, with scope change affecting other products.
- CVE-2026-70728High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker can gain full data access and modify some data over HTTP, with scope change.
- CVE-2026-70717High
Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Difficult to exploit, allows a low-privileged attacker with physical access to the communication segment to gain unauthorized access and modify data.
- CVE-2026-70715High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Autonomous Health Framework.
- CVE-2026-60172Medium
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Original NVD description (English source)
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. While the vulnerability is in Oracle Autonomous Health Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Autonomous Health Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS