Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
|
Tue, 20 Oct 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Device Management and Support Component Allows Low‑Privilege Denial of Service in Oracle Secure Backup | |
| Weaknesses | CWE-284 |
Tue, 20 Oct 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. While the vulnerability is in Oracle Secure Backup, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Secure Backup. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). | |
| First Time appeared |
Oracle
Oracle secure Backup |
|
| CPEs | cpe:2.3:a:oracle:secure_backup:19.1.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:secure_backup:19.1.0.1.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle secure Backup |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-10-20T21:21:07.237Z
Reserved: 2026-09-28T15:40:09.486Z
Link: CVE-2026-101483
No data.
Status : Awaiting Analysis
Published: 2026-10-20T22:17:57.393
Modified: 2026-10-21T14:29:49.513
Link: CVE-2026-101483
No data.
OpenCVE Enrichment
Updated: 2026-10-20T23:30:08Z
-
CWE-284
Improper Access Control