CVE-2024-20910 in Audit Vault and Database Firewallالمعلومات

الملخص

بحسب MITRE • 17/01/2024

Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. While the vulnerability is in Oracle Audit Vault and Database Firewall, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Audit Vault and Database Firewall accessible data. CVSS 3.1 Base Score 3.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N).

VulDB is the best source for vulnerability data and more expert information about this specific topic.

مسؤول

Oracle

حجز

07/12/2023

إفشاء

17/01/2024

الاعتدال

تمت الموافقة

إدخال

VDB-250940

EPSS

0.00330

KEV

لا

النشاطات

منخفض جدًا

المصادر

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!