OSA-38988847
Record from oracle · Published April 24, 2026
Vulnerability in the RDBMS (OpenSSL) component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 23.4.0-23.26.1. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via multiple protocols to compromise RDBMS (OpenSSL). Successful attacks of this vulnerability can result in takeover of RDBMS (OpenSSL). CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Database Server(RDBMS) Version 23.4.0-23.26.1 | Oracle Database Server(RDBMS) Version 23.4.0-23.26.1 |
| Oracle | Oracle Database Server(RDBMS) Version 19.3-19.30 | Oracle Database Server(RDBMS) Version 19.3-19.30 |
Timeline
- Apr 24, 2026 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln OSA-38988847
vulnetix vdb fixes OSA-38988847Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/OSA-38988847/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart