Unauthorized Access Vulnerability in Oracle TimesTen In-Memory Database
CVE-2026-101522

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Timesten In-memory Database
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101522?

A vulnerability exists in Oracle's TimesTen In-Memory Database that could allow a low privileged attacker to gain unauthorized access. Exploiting this vulnerability may enable access to sensitive data stored within the database. The affected versions, specifically 22.1 and 22.1.1.43.0, can be exploited if an attacker has login capabilities to the infrastructure where the database operates. This risk highlights the importance of securing database environments to prevent unauthorized data access and protect critical information.

Affected Version(s)

Oracle TimesTen In-Memory Database 22.1 <= 22.1.1.43.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.