Oracle DB 19.319.30 RDBMS Privilege Escalation via Row Access
CVE-2026-34312 Published on April 21, 2026
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.30. Easily exploitable vulnerability allows high privileged attacker having Row Access Method privilege with network access via multiple protocols to compromise RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS accessible data. CVSS 3.1 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).
Vulnerability Analysis
CVE-2026-34312 is exploitable with network access, requires user interaction and user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-34312 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-34312
stack.watch emails you whenever new vulnerabilities are published in Oracle or Oracle Database Rdbms. Just hit a watch button to start following.
Affected Versions
Oracle Corporation Oracle Database Server:- Version 19.3, <= 19.30 is affected.