Live › vulnerability › CVE-2026-101522
Go to dashboardOracle TimesTen In-Memory Database versions 22.1 through 22.1.1.43.0 contain a flaw in the TimesTen IMDB component. A local user with low privileges and a logon to the host can read data the database should protect.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle TimesTen In-Memory Database 22.1 through 22.1.1.43.0 on a host where other users can log on. The attack needs a local account on the infrastructure that runs TimesTen, not a remote network connection. Hosts where only the database service account and administrators can log on are lower risk.
No product ranges from the sources yet.
ttVersion on the database host and compare against 22.1.1.43.022.1.1.43.0 per Oracle's Critical Patch Update for the relevant quarterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise Oracle TimesTen In-Memory Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle TimesTen In-Memory Database accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101522")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.