Oracle Database Server XML Database Component Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the XML Database component of Oracle Database Server, specifically in versions 23.4.0 through 23.26.1. This vulnerability, which is difficult to exploit, allows an unauthenticated attacker with network access via HTTPS to compromise XML Database. Exploitation of this issue requires human interaction from a third party. Successful attacks could lead to unauthorized access to critical data or complete access to all data accessible through XML Database.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data in XML Database that is accessible to the user.