A vulnerability exists in the Oracle Trusted Answer Search PLSQL package that can be exploited by an attacker who has low‑privilege access and a local logon to the infrastructure where the component runs. The flaw allows the attacker to perform unauthorized update, insert, or delete operations on some Oracle Trusted Answer Search data, to read a subset of that data, and to trigger a partial denial of service. The vulnerability requires human interaction from a person other than the attacker, making exploitation more complex but still possible within the affected environment.

The issue affects Oracle Trusted Answer Search version 26.1. Specifically, the vulnerable component is the PLSQL package used by the service. Any installation of 26.1 that has local access to the Oracle Trusted Answer Search infrastructure may be impacted.

The CVSS 3.1 score of 5.0 indicates a moderate severity vulnerability. Exploitation requires low‑privilege access and local logon, and success depends on human interaction from a third party. The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, suggesting that while the risk is present, it is not currently being exploited on a large scale. However, the presence of data modification, read, and availability impacts warrants careful monitoring and consideration of remediation steps.