CVE-2018-2914: Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager).

Security readout for executives and security teams

CVE-2018-2914 is an unauthenticated network denial-of-service issue in Oracle GoldenGate Manager. An attacker with TCP access can cause GoldenGate to hang or repeatedly crash. The business risk is replication disruption and operational downtime, not data theft or modification according to the provided record. Organizations running the listed Oracle GoldenGate versions with Manager reachable over TCP are in scope. Exposure is highest where Manager is reachable from untrusted networks or broad administrative networks. The source bundle does not identify other affected products or versions. Treat this as a high-priority availability risk for Oracle GoldenGate environments. It does not indicate confidentiality or integrity compromise, but it can disrupt replication-dependent business processes. Patch or isolate affected Manager services based on operational criticality. Mitigation focus: Check Oracle October 2018 CPU guidance for the vendor-supported fix or update path.; Restrict GoldenGate Manager TCP access to trusted administrative hosts only.; Segment replication management services away from untrusted networks..

Prepared

Jun 7, 2026, 05:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.