CVE-2019-25653

MEDIUM 5.5CVE-2019-25653 · Published 30/03/2026 · updated 17/06/2026

In short

CVE-2019-25653 is a MEDIUM (CVSS 5.5) vulnerability affecting navicat for oracle (navicat).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
navicat for oracle navicat	`≤ 12.1.15`	No fix yet

Description

Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer of 550 repeated characters into the password parameter during Oracle connection configuration to trigger an application crash.

References

exploit-db.com/exploits/46383 · Exploit
navicat.com/es · Product
navicat.com/es/download/navicat-for-oracle · Product
vulncheck.com/advisories/navicat-for-oracle-password-field-denial-of-service · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free