High WID-SEC-2026-2434 14 CVEs

Oracle TimesTen In-Memory Database: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Vendor: Oracle Product: TimesTen In-Memory Database Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle TimesTen In-Memory Database ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Oracle Datenbank ist ein weit verbreitetes relationales Datenbanksystem.

Vulnerabilities 14

Critical 9.9

CVE-2026-60402

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Critical 9.8

CVE-2026-4176

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-…

SHAY perl openjpeg2 perl Debian Ubuntu Azure Linux Alpine Wolfi

Mar 29, 2026
High 7.5

CVE-2026-42587

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is c…

netty io.netty netty netty-codec-http Debian Wolfi Maven

May 13, 2026
Medium 6.7

CVE-2026-60406

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 6.5

CVE-2026-24308

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO leve…

Apache Software Foundation Apache ZooKeeper druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Mar 7, 2026
Medium 6.5

CVE-2026-60401

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 6.5

CVE-2026-60403

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 6.5

CVE-2026-60404

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 6.5

CVE-2026-60411

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). …

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 5.7

CVE-2026-60409

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 5.6

CVE-2026-60407

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 4.3

CVE-2026-60408

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Medium 4.3

CVE-2026-60410

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026
Low 3.8

CVE-2026-60405

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes O…

Oracle TimesTen In-Memory Database

Jul 21, 2026

Revision history

2026-07-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle TimesTen In-Memory Database vom 2026-07-21
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixXTEN