CVE-2026-60410
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Easily exploitable flaw allows a low-privileged attacker with network access via HTTPS to cause a partial denial of service (partial DOS).
Risk Assessment
Risk involves reduced database availability, potentially impacting applications relying on TimesTen.
Recommendation
Apply Oracle patches and monitor database load to detect DoS attacks.
Other vulnerabilities in TimesTen In-Memory Database
See all- CVE-2026-60409Medium
TimesTen In-Memory Database version 26.1.1.1.0 has a vulnerability in the Kubernetes Operator component. A privileged attacker with local access can unauthorizedly update, insert, or delete data, read a subset of data, and cause a partial denial of service (partial DOS), also affecting other products.
- CVE-2026-60408Medium
Vulnerability in TimesTen In-Memory Database (version 26.1.1.1.0) in the Kubernetes Operator component. A low-privileged attacker via HTTPS can gain unauthorized read access to data.
- CVE-2026-60406Medium
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. A high-privileged attacker with local access can take over the database.
- CVE-2026-60405Low
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator) version 26.1.1.1.0. Allows a low-privileged attacker with local access to read unauthorized data, potentially affecting other products.
- CVE-2026-60404Medium
Vulnerability in TimesTen In-Memory Database (Kubernetes Operator component). A low-privileged attacker via HTTPS can cause a hang or frequent crashes (full DOS).
- CVE-2026-60403Medium
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator). Affects version 26.1.1.1.0. A low-privileged attacker with network access via HTTPS can cause a complete denial of service (complete DOS) by hanging or frequent crashes.
- CVE-2026-60401Medium
A vulnerability in TimesTen In-Memory Database's Kubernetes Operator allows a low-privileged attacker with local access to gain complete access to all database data, with impact on other products.
Original NVD description (English source)
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of TimesTen In-Memory Database. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).