CVE-2026-73964

CVE-2026-73964

Low · published October 21, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high privileged attacker having Query Optimizer privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.8th percentile
Published
2026-10-21T02:19Z
References (1)
EPSS history
Timeline
  • 22 OCT 03:35Z
    EPSS moved — → 0%
    epss
  • 20 OCT 21:23Z
    Vulnerability in the RDBMS component of Oracle Database Server
    cvelistv5
  • 20 OCT 21:23Z
    Vulnerability in the RDBMS component of Oracle Database Server
    cvelistv5