Vulnerability Identifier

CVE-2026-34312

2026-04-21

Severity Assessment

2.4

LOW

CVSS v3.x Score

Clinical Analysis (Description)

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.30. Easily exploitable vulnerability allows high privileged attacker having Row Access Method privilege with network access via multiple protocols to compromise RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

Vector Sequencing

Attack Parameters

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Impact Consequences

Technical Impact

Unchanged

Scope

Low

Confidentiality

None

Integrity

None

Availability

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

Timeline

Time Line

PUBLICATION

21 Apr 2026

FIRST PATCH

21 Apr 2026

Impact Statistics

Key Metrics

CVSS Score

2.4

LOW

Patches

Available

Remediation Protocol

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.

Sources & Bibliography

NIST NVD MITRE CVE External Reference ↗

CVE Vulnerabilities

Posts & Pages