Login Request a demo
GO
Product
Goldengate
by Oracle · last CVE Jul 21, 2026
33
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 3High 15Medium 12Low 0
Severity
All severities33Critical3High15Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Goldengate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2913
10.0
4%
Oct 17
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager)
Affected: 12.1.2.1.0; 12.2.0.2.0; 12.3.0.1.0
CVE-2017-5645
9.8
89%
Apr 17
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary…
Affected: 12.3.2.1.1
CVE-2020-14705
9.6
2%
Jul 15
Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management)
Affected: before 19.1.0.0.0
CVE-2026-60400
8.8
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2026-60398
8.8
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2026-60157
8.8
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Service Manager)
Affected: 19.1.0.0.0 through 19.29.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2022-21442
8.8
0%
Apr 19
Vulnerability in Oracle GoldenGate (component: OGG Core Library)
Affected: before 23.1
CVE-2018-2832
8.6
2%
Apr 19
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate
Affected: 12.2.0.1
CVE-2021-2351
8.3
2%
Jul 21
Vulnerability in the Advanced Networking Option component of Oracle Database Server
Affected: before 12.3.0.1.0; 19.1.0.0.1 before 21.5.0.0.220118
CVE-2026-61106
8.1
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Config Service Executable)
Affected: 23.4 through 23.26.2.0.0
CVE-2018-1311
8.1
10%
Dec 18
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs
Affected: before 21.4.0.0.0
CVE-2026-60570
7.8
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Libraries)
Affected: 23.4 through 23.26.1.0.0
CVE-2021-23017
7.7
53%
Jun 1
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting…
Affected: before 21.4.0.0.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: All versions, or not specified
CVE-2021-3749
7.5
9%
Aug 31
axios is vulnerable to Inefficient Regular Expression Complexity
Affected: 21.1 before 21.7.0.0.0
CVE-2018-2914
7.5
4%
Oct 17
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager)
Affected: 12.1.2.1.0; 12.2.0.2.0; 12.3.0.1.0
CVE-2018-2912
7.5
4%
Oct 17
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager)
Affected: 12.1.2.1.0; 12.2.0.2.0; 12.3.0.1.0
CVE-2026-60396
7.2
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Distribution Server executable)
Affected: 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2022-21551
6.8
1%
Jul 19
Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate)
Affected: 19.1.0.0.0 before 19.1.0.0.220719; 21.1.0 before 21.7.0.0.0
CVE-2026-60399
6.5
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Receiver Service Executable)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2019-3738
6.5
2%
Sep 18
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability
Affected: before 19.1.0.0.0.210420; 19.1.0.0.0.210420
CVE-2019-3740
6.5
4%
Sep 18
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation
Affected: before 19.1.0.0.0.210420
CVE-2019-3739
6.5
3%
Sep 18
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation
Affected: before 19.1.0.0.0.210420
CVE-2019-14862
6.1
2%
Jan 2
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with…
Affected: 12.3.0.1.2
CVE-2026-61079
5.8
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Libraries)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.2.0.0
CVE-2026-60394
5.3
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
Affected: 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2026-34273
5.3
0%
Apr 21
Vulnerability in Oracle GoldenGate (component: Libraries)
Affected: 23.4 through 23.10
CVE-2026-61084
4.4
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Libraries)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.2.0.0
CVE-2026-60397
4.3
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2026-60395
4.3
0%
Jul 21
Vulnerability in Oracle GoldenGate (component: Admin Server Executable)
Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0
CVE-2016-0452
–
6%
Jan 21
Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability…
Affected: 11.2; 12.1.2
CVE-2016-0451
–
7%
Jan 21
Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability…
Affected: 11.2; 12.1.2
CVE-2016-0450
–
4%
Jan 21
Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect availability via unknown vectors
Affected: 11.2; 12.1.2
Showing 33