Resource exhaustion in Oracle Goldengate Stream Analytics
CVE-2026-47022
Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). The supported version that is affected is 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where GoldenGate Stream Analytics executes to compromise GoldenGate Stream Analytics. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of GoldenGate Stream Analytics. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Vulnerability class: DoS (Denial of Service)
EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Oracle Goldengate_stream_analytics — versions 26.1.0.0.0
- Oracle Corporation Goldengate Stream Analytics — versions 26.1.0.0.0
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-47022?
- CVE-2026-47022 is a low-severity vulnerability in Oracle Goldengate Stream Analytics, classified under Uncontrolled Resource Consumption. CVSS score: 3.3/10. Published 2026-07-21.
- How severe is CVE-2026-47022?
- Low severity. CVSS v3 base score is 3.3 out of 10.