Known vulnerabilities in Oracle GoldenGate

Vendor: Oracle
Software: Oracle GoldenGate
Software CPE: cpe:2.3:a:oracle:oracle_goldengate:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 21
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle GoldenGate Oracle GoldenGate is affected by 21 known vulnerabilities: 6 high, 10 medium, 5 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126716 - Improper input validation
CVE-2026-34273		 CWE-20 Medium
No
No
 - 21.04.2026 -
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 -
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 - 15.08.2024 -
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 -
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 -
#VU81802 - Improper input validation
CVE-2023-36785		 CWE-20 High
No
No
 - 10.10.2023 -
#VU68876 - Improper input validation
CVE-2022-21551		 CWE-20 Medium
No
No
 21.7.0.0.0 01.11.2022 SB2022110112
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 19.1.0.0.230418, 21.10.0.0.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65451 - Improper input validation
CVE-2020-35169		 CWE-20 High
No
No
 - 19.07.2022 -
#VU62494 - Improper input validation
CVE-2022-21442		 CWE-20 Low
No
No
 23.1.0.0.0 22.04.2022 SB2022042227
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 -
#VU56963 - Resource exhaustion
CVE-2021-3749		 CWE-400 Medium
No
No
 21.7.0.0.0 30.09.2021 SB2021093011
SB2021093012
SB2021120334
and 5 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 12.3.0.1.0, 19.1.0.0.220118, 21.5.0.0.220118 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU53543 - Off-by-one Error
CVE-2021-23017		 CWE-193 High
Available
No
 21.4.0.0.0 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 - 30.10.2020 -
#VU29960 - Improper input validation
CVE-2020-14705		 CWE-20 High
No
No
 19.1.0.0.0 16.07.2020 SB2020071603
#VU24140 - Use After Free
CVE-2018-1311		 CWE-416 High
No
No
 21.4.0.0.0 08.01.2020 SB2019121828
SB2020030618
SB2020030619
and 31 more
#VU23381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14862		 CWE-79 Low
No
No
 12.3.0.1.2 04.12.2019 SB2017012508
SB2020071680
SB2021012044
and 2 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 12.3.0.1.2 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 29 more
#VU17018 - Permissions, Privileges, and Access Controls
CVE-2018-18893		 CWE-264 Low
No
No
 - 16.01.2019 -


Showing elements 1 - 20 out of 21