CVE-2024-49588: Oracle Oracle-Sidecar

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections.

Affected products

• Oracle Oracle-Sidecar: from 0.347.0, before 0.544.0 (fixed in 0.544.0)
• Palantir Com.palantir.srx.prometheus.sls-Oracle-Sidecar:sls-Oracle-Sidecar: before 0.544.0 (fixed in 0.544.0); from 0.347.0

Published 2024-11-21. Last modified 2026-06-17.