GoldenGate vulnerabilities

6 known vulnerabilities in GoldenGate from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Oracle GoldenGate: Improper Access Control

  CVE-2026-61106Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supported versions that are affected are 23.4-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. S

• 7.8 High severity

  Oracle GoldenGate: Improper Access Control

  CVE-2026-60570Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Libraries). Supported versions that are affected are 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Or

• 8.8 High severity

  Oracle GoldenGate: Improper Access Control

  CVE-2026-60400Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS t

• 8.8 High severity

  Oracle GoldenGate: Missing Authentication for Critical Functionality

  CVE-2026-60398Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.2 High severity

  Oracle GoldenGate: Missing Authentication for Critical Functionality

  CVE-2026-60396Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Distribution Server executable). Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise O

• 8.8 High severity

  Oracle GoldenGate: Improper Access Control

  CVE-2026-60157Jul 21, 2026Oracle

  Vulnerability in Oracle GoldenGate (component: Service Manager). Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and 23.4-23.26.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com