Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.
Severity
CVSS 3.0
9.1 critical
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)