CVE-2021-2045 in Database Serverinformation

Résumé

par MITRE • 20/01/2021

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Text. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Text. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

Oracle

Réserver

09/12/2020

Divulgation

20/01/2021

Modérer

accepté

Entrée

VDB-168156

CPE

prêt

EPSS

0.00939

KEV

non

Activités

très faible

Sources

Do you need the next level of professionalism?

Upgrade your account now!