CVE Catalog

CVE-2026-60407

MediumCVSS 5.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. It is difficult to exploit, requires local access and low privileges. Successful attack can lead to unauthorized access to critical data or full access to all database data.

Risk Assessment

The risk involves potential leakage of sensitive data stored in the TimesTen database, compromising organizational confidentiality.

Recommendation

Update to the latest version of Oracle TimesTen In-Memory Database and restrict local access to servers.

Other vulnerabilities in Oracle TimesTen In-Memory Database

See all
Original NVD description (English source)

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen In-Memory Database executes to compromise TimesTen In-Memory Database. While the vulnerability is in TimesTen In-Memory Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 5.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS