The vulnerability is an easily exploitable local security flaw that allows an attacker who is already authenticated to the host where Oracle TimesTen In-Memory Database runs to read any data stored in the database. The flaw is not network exposed; it requires local logon. Successful exploitation results in unauthorized access to confidential data, creating a confidentiality impact.

Oracle TimesTen In-Memory Database versions 22.1 through 22.1.1.43.0 are affected. No other software or versions were listed as impacted.

The CVSS base score of 5.5 indicates a moderate severity impact on confidentiality. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting limited evidence of exploitation in the wild. The likely attack vector is local; an attacker with low‑privileged host access can exploit the flaw. If the attacker can log on to the infrastructure where TimesTen runs, they can read all data accessible to the database, which could lead to significant data leakage.