CVE-2026-60405
LowCVSS 3.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Allows a low-privileged attacker with local access to read unauthorized data, potentially affecting other products.
Risk Assessment
The risk involves unauthorized data disclosure from TimesTen, potentially impacting other systems.
Recommendation
Update TimesTen In-Memory Database to a patched version and monitor local access.
Other vulnerabilities in TimesTen In-Memory Database
See all- CVE-2026-60410Medium
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to cause a partial denial of service (partial DOS).
- CVE-2026-60409Medium
TimesTen In-Memory Database version 26.1.1.1.0 has a vulnerability in the Kubernetes Operator component. A privileged attacker with local access can unauthorizedly update, insert, or delete data, read a subset of data, and cause a partial denial of service (partial DOS), also affecting other products.
- CVE-2026-60408Medium
Vulnerability in TimesTen In-Memory Database (version 26.1.1.1.0) in the Kubernetes Operator component. A low-privileged attacker via HTTPS can gain unauthorized read access to data.
- CVE-2026-60406Medium
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. A high-privileged attacker with local access can take over the database.
- CVE-2026-60404Medium
Vulnerability in TimesTen In-Memory Database (Kubernetes Operator component). A low-privileged attacker via HTTPS can cause a hang or frequent crashes (full DOS).
- CVE-2026-60403Medium
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator). Affects version 26.1.1.1.0. A low-privileged attacker with network access via HTTPS can cause a complete denial of service (complete DOS) by hanging or frequent crashes.
- CVE-2026-60401Medium
A vulnerability in TimesTen In-Memory Database's Kubernetes Operator allows a low-privileged attacker with local access to gain complete access to all database data, with impact on other products.
Original NVD description (English source)
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. While the vulnerability is in TimesTen In-Memory Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS