Lucene search

K
cvelistOracleCVELIST:CVE-2020-14741
HistoryOct 21, 2020 - 2:04 p.m.

CVE-2020-14741

2020-10-2114:04:23
oracle
www.cve.org
8
oracle database server
vulnerability
11.2.0.4
12.1.0.2
12.2.0.1
exploitable vulnerability
high privileged attacker
resource
create table
create view
create procedure
dbfs_role privilege
oracle net
compromise
unauthorized
dos
cvss 3.1
base score 4.9

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5

Confidence

High

EPSS

0.001

Percentile

25.4%

Vulnerability in the Database Filesystem component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Resource, Create Table, Create View, Create Procedure, Dbfs_role privilege with network access via Oracle Net to compromise Database Filesystem. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Database Filesystem. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CNA Affected

[
  {
    "product": "Database - Enterprise Edition",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "11.2.0.4"
      },
      {
        "status": "affected",
        "version": "12.1.0.2"
      },
      {
        "status": "affected",
        "version": "12.2.0.1"
      }
    ]
  }
]

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5

Confidence

High

EPSS

0.001

Percentile

25.4%

Related for CVELIST:CVE-2020-14741