GO
Product
Goldengate
33
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 15Medium 12Low 0
Watch
Add Goldengate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60400 | 8.8 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable) Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0 |
| CVE-2026-60398 | 8.8 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices) Affected: 19.1.0.0.0 through 19.30.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0 |
| CVE-2026-60157 | 8.8 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Service Manager) Affected: 19.1.0.0.0 through 19.29.0.0; 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0 |
| CVE-2022-21442 | 8.8 | Apr 19 | Vulnerability in Oracle GoldenGate (component: OGG Core Library) Affected: before 23.1 |
| CVE-2018-2832 | 8.6 | Apr 19 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate Affected: 12.2.0.1 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: before 12.3.0.1.0; 19.1.0.0.1 before 21.5.0.0.220118 |
| CVE-2026-61106 | 8.1 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Config Service Executable) Affected: 23.4 through 23.26.2.0.0 |
| CVE-2018-1311 | 8.1 | Dec 18 | The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs Affected: before 21.4.0.0.0 |
| CVE-2026-60570 | 7.8 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Libraries) Affected: 23.4 through 23.26.1.0.0 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: before 21.4.0.0.0 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: All versions, or not specified |
| CVE-2021-3749 | 7.5 | Aug 31 | axios is vulnerable to Inefficient Regular Expression Complexity Affected: 21.1 before 21.7.0.0.0 |
| CVE-2018-2914 | 7.5 | Oct 17 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager) Affected: 12.1.2.1.0; 12.2.0.2.0; 12.3.0.1.0 |
| CVE-2018-2912 | 7.5 | Oct 17 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager) Affected: 12.1.2.1.0; 12.2.0.2.0; 12.3.0.1.0 |
| CVE-2026-60396 | 7.2 | Jul 21 | Vulnerability in Oracle GoldenGate (component: Distribution Server executable) Affected: 21.3.0 through 21.21.0.0.0; 23.4 through 23.26.1.0.0 |
Showing 15