Known vulnerabilities in Oracle GoldenGate 19.1.0.0.220719

Vendor: Oracle
Version: 19.1.0.0.220719
Software CPE: cpe:2.3:a:oracle:oracle_goldengate:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle GoldenGate version 19.1.0.0.220719 Oracle GoldenGate 19.1.0.0.220719 is affected by 14 vulnerabilities: 4 high, 4 medium, 6 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU163287 - Improper input validation
CVE-2026-87351
CWE-20 High
No
No
- 10.11.2026 SB2026111014
#VU163289 - Improper input validation
CVE-2026-91547
CWE-20 Low
No
No
- 10.11.2026 SB2026111014
#VU159872 - Improper input validation
CVE-2026-60398
CWE-20 High
No
No
- 07.11.2026 SB2026110707
#VU159873 - Improper input validation
CVE-2026-60157
CWE-20 High
No
No
- 07.11.2026 SB2026110707
#VU159874 - Improper input validation
CVE-2026-60400
CWE-20 High
No
No
- 07.11.2026 SB2026110707
#VU159879 - Improper input validation
CVE-2026-60399
CWE-20 Medium
No
No
- 07.11.2026 SB2026110707
#VU159880 - Improper input validation
CVE-2026-61079
CWE-20 Low
No
No
- 07.11.2026 SB2026110707
#VU159883 - Improper input validation
CVE-2026-61084
CWE-20 Low
No
No
- 07.11.2026 SB2026110707
#VU159884 - Improper input validation
CVE-2026-60395
CWE-20 Low
No
No
- 07.11.2026 SB2026110707
#VU159885 - Improper input validation
CVE-2026-60397
CWE-20 Low
No
No
- 07.11.2026 SB2026110707
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Public exploit available
No
- 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
- 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
19.1.0.0.230418, 21.10.0.0.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Public exploit available
No
- 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 75 more