CVE-2026-35228

CVSS Score & Metrics

Base Score

8.7 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N                                    

Vulnerability Description

Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source Projects (component: helper tool). The supported versions that is affected is 1.0.1-1.0.156. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MCP Server Helper Tool. Successful attacks of this vulnerability can result in Oracle MCP Server Helper Tool executing malicious SQL.

Vulnerability Details

Published Date

May 05, 2026

Last Modified

May 05, 2026

CWE ID

CWE-89

Source

NVD

Vendor

Oracle Corporation

Product

Oracle MCP Server Helper Tool product of Oracle Open Source Projects

External References

https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment