Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveOracleCVE-2019-2940
HistoryOct 16, 2019 - 6:15 p.m.

CVE-2019-2940

2019-10-1618:15:29
oracle
web.nvd.nist.gov
39
cve-2019-2940
oracle
database
server
rdbms
vulnerability
security
access
unauthorized access
data

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

AI Score

3.1

Confidence

Low

EPSS

0.001

Percentile

18.2%

JSON

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session privilege with logon to the infrastructure where Core RDBMS executes to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Core RDBMS accessible data. CVSS 3.0 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Affected configurations

Nvd
Vulners
Node
oracledatabase_serverMatch12.1.0.2
OR
oracledatabase_serverMatch12.2.0.1
OR
oracledatabase_serverMatch18c
VendorProductVersionCPE
oracledatabase_server12.1.0.2cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
oracledatabase_server12.2.0.1cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*
oracledatabase_server18ccpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Oracle Database",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0.2"
      },
      {
        "status": "affected",
        "version": "12.2.0.1"
      },
      {
        "status": "affected",
        "version": "18c"
      }
    ]
  }
]

Related

nvd 1
symantec 1
prion 1
cvelist 1
ibm 5
nessus 1
oracle 1
nvd
nvd
CVE-2019-2940
2019-10-16 18:15:29
symantec
symantec
Oracle Database Server CVE-2019-2940 Local Security Vulnerability
2019-10-15 00:00:00
prion
prion
Design/Logic Flaw
2019-10-16 18:15:00
cvelist
cvelist
CVE-2019-2940
2019-10-16 17:40:55
ibm
ibm
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform
2020-06-11 14:11:50
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt
2020-06-11 14:03:30
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management
2020-06-11 14:09:11
nessus
nessus
Oracle Database Server Multiple Vulnerabilities (Oct 2019 CPU)
2019-10-18 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

AI Score

3.1

Confidence

Low

EPSS

0.001

Percentile

18.2%

JSON
Related for CVE-2019-2940
nvd1symantec1prion1cvelist1ibm5nessus1oracle1