CVE-2026-35229

High

Published: 21/04/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Vulnerability in the Java VM component of Oracle Database Server allows unauthenticated attackers with network access to compromise Java VM. Successful attacks can lead to unauthorized access to critical data.

Risk Assessment

The organization may lose data confidentiality, potentially resulting in serious legal and financial consequences.

Recommendation

It is recommended to update to the latest version of Oracle Database Server to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Java VM component of Oracle Database Server

CVE-2017-10190High
Vulnerability in the Java VM component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. Easily exploitable by a high privileged attacker, potentially leading to takeover of the Java VM.

Original NVD description (English source)

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java VM accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).