CVE-2017-3615: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

CVE-2017-3615 affects Oracle Berkeley DB Data Store before version 6.2.32. If successfully exploited, it can let an attacker take over the Data Store. The business risk is significant because confidentiality, integrity, and availability are all rated high, but exploitation is constrained by local access, high complexity, and required user interaction. Exposure is limited to infrastructure running Oracle Berkeley DB Data Store prior to 6.2.32. The attacker must have logon access to the infrastructure where Data Store executes, so internet-wide unauthenticated exposure is not supported by the provided sources. Treat as high priority where Berkeley DB Data Store is present on critical systems. The impact is severe, but urgency is reduced compared with remotely exploitable flaws because the attacker needs local infrastructure logon and user interaction. Mitigation focus: Identify Oracle Berkeley DB Data Store deployments and versions.; Upgrade affected deployments to 6.2.32 or later, following Oracle guidance.; Restrict logon access to infrastructure running Data Store..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.