Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2022.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Jan 2022, 03:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:* cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:* |
|
| First Time |
Oracle
Oracle database Server |
|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 2.7 |
| References | (MISC) https://www.oracle.com/security-alerts/cpujan2022.html - Vendor Advisory |
19 Jan 2022, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-19 12:15
Updated : 2023-12-10 14:09
NVD link : CVE-2022-21247
Mitre link : CVE-2022-21247
CVE.ORG link : CVE-2022-21247
JSON object : View
Products Affected
oracle
- database_server
CWE