CVE-2019-2760: Vulnerability in the Data Store component of Oracle Berkeley DB.

Security readout for executives and security teams

CVE-2019-2760 affects Oracle Berkeley DB Data Store. An attacker with local access to the infrastructure where Data Store runs could, with user interaction and difficult exploitation conditions, take over the Data Store component. The impact is serious, but the prerequisites reduce broad internet-scale risk. Exposure is likely limited to organizations running the affected Oracle Berkeley DB Data Store versions on systems where untrusted or weakly controlled local infrastructure logon is possible. Treat this as a high-priority patch-cycle issue where affected Berkeley DB versions exist. It is not evidenced as actively exploited in the supplied sources, but successful compromise could mean full Data Store takeover and business-impacting confidentiality, integrity, and availability loss. Mitigation focus: Review Oracle July 2019 CPU guidance for applicable Berkeley DB remediation.; Upgrade or patch affected Berkeley DB deployments per Oracle guidance.; Restrict local and infrastructure logon access to Data Store hosts..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.