CVE-2026-101600
LowCVSS 3.6Summary
Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB) affecting versions 26.1-26.1.1.3.0. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.
Risk Assessment
A low privileged attacker could modify or delete data in the in-memory database and read a subset of it, potentially compromising integrity and confidentiality of data.
Recommendation
Apply Oracle security updates for versions 26.1-26.1.1.3.0 and restrict local access to the TimesTen In-Memory Database infrastructure.
Other vulnerabilities in Oracle TimesTen In-Memory Database
See all- CVE-2026-101522Medium
Vulnerability in Oracle TimesTen In-Memory Database (TimesTen IMDB component) affecting versions 22.1-22.1.1.43.0. A low-privileged attacker with logon access to the infrastructure where the database runs can exploit it to gain unauthorized access to critical data or complete access to all database accessible data.
- CVE-2026-60402Critical
Vulnerability in Oracle TimesTen In-Memory Database (Kubernetes Operator component) allows a low-privileged attacker with network access via HTTPS to take over the database. Attacks may impact additional products (scope change).
- CVE-2026-87354Medium
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) affects versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0. A low privileged attacker with network access via HTTPS can gain unauthorized read access to a subset of accessible data.
- CVE-2026-60411Medium
Vulnerability in Oracle TimesTen In-Memory Database (ttcserver component) version 26.1.1.1.0. An unauthenticated attacker with access to the physical communication segment can cause a hang or frequent crash (complete DOS) of the database.
- CVE-2026-60407Medium
Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. It is difficult to exploit, requires local access and low privileges. Successful attack can lead to unauthorized access to critical data or full access to all database data.
Original NVD description (English source)
Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise Oracle TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle TimesTen In-Memory Database accessible data as well as unauthorized read access to a subset of Oracle TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 3.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS