The vulnerability in Oracle Secure Backup (versions 19.1.0.0.0 and 19.1.0.1.0) allows an unauthenticated attacker with network connectivity to the service to gain full control of the backup system. The flaw results in complete takeover, compromising the confidentiality, integrity, and availability of the backup data and the backup infrastructure. The CVSS 3.1 base score of 9.8 reflects the severe impact on all three CIA triad components.

Affected vendor is Oracle Corporation, product Oracle Secure Backup. Application versions 19.1.0.0.0 and 19.1.0.1.0 are affected. Only these specific releases are at risk; newer releases beyond 19.1.1 or patched versions are not mentioned as affected.

The CVSS score of 9.8 indicates high severity, and the description states the attack is easily exploitable via TCP. EPSS data is not available, so explicit probability cannot be assigned. Since the vulnerability is not listed in CISA KEV it is not known to be actively exploited yet, but the absence of authentication and the remote nature of the attack vector make it a prime target for potential attackers. Based on the description, the attacker only needs network access to the Secure Backup service and does not require any privileged credentials.