Vulnerability in Oracle Corporation Database Server

CVE-2026-83347

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Net Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

References

Frequently asked questions

What is CVE-2026-83347?
CVE-2026-83347 is a medium-severity vulnerability in Oracle Corporation Database Server. CVSS score: 6.5/10. Published 2026-09-15.
How severe is CVE-2026-83347?
Medium severity. CVSS v3 base score is 6.5 out of 10.