Navicat vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Navicat products: 1 record(s), with severity, exploitation and fixes.

Navicat For Oracle 1

Exploited only (KEV) →

CVE-2019-25653 Medium · 5.5 CWE-620 Mar 30, 2026

Navicat for Oracle 12.1.15 Password Field Denial of Service

Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer of 550 repeated characters into the password parameter during Oracle connection configuration to trigger an application crash.