CVE-2022-21432

CVE-2022-21432 affects Oracle Database Server - Enterprise Edition RDBMS Security. Affected are 12.1.0.2, 19c and 21c; exploitation requires a high-privilege DBA and network access via Oracle Net, enabling partial denial of service. Severity in the CVSS 3.1 base is 2.7 (LOW) with AV:N/AC:L/PR:H/U...

CVE-2022-21432

Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle N...

PT-2022-3787

Name of the Vulnerable Software and Affected Versions Oracle Database - Enterprise Edition RDBMS Security versions 12.1.0.2, 19c, and 21c Description The issue is related to errors in resource release in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server...

PT-2022-14972

Name of the Vulnerable Software and Affected Versions Oracle Database - Enterprise Edition Recovery affected versions not specified Description A vulnerability in the Oracle Database - Enterprise Edition Recovery component allows a high-privileged attacker with EXECUTE ON DBMS IR.EXECUTESQLSCRIPT...

CVE-2022-21565: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful...

CVE-2022-21511: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported versions that are affected see note. Easily exploitable vulnerability allows high privileged attacker having EXECUTE ON DBMSIR.EXECUTESQLSCRIPT privilege with network access via...

CVE-2022-21510: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported versions that are affected see note. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Oracle...

CVE-2022-21432: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle N...

PT-2022-14971

Name of the Vulnerable Software and Affected Versions Oracle Database - Enterprise Edition Sharding affected versions not specified Description The issue affects the Oracle Database - Enterprise Edition Sharding component, allowing a low-privileged attacker with local logon privilege to compromis...

PT-2022-3773

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 19c, and 21c Description The issue is related to insufficient protection of internal data in the Java VM component. It allows a low-privileged attacker with Create Procedure privilege and network acces...

Oracle Database Server security vulnerabilities

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing, etc. Java VM is one of the Java virtual machine components. A security vulnerability exists in Oracle Database Server, which...

Oracle MySQL input validation vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in Oracle MySQL, which can be exploited to take over the MySQL Cluster...

Oracle MySQL input validation vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components. An input validation error vulnerability exists in Oracle MySQL Server 8.0.29 and prior versions, which originated when an attacker with elevated...

Oracle Database Server security vulnerabilities

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database - Enterprise Edition Recovery that...

Oracle MySQL input validation vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and an input validation error vulnerability exists in Oracle MySQL 8.0.29 and earlier versions. An incorrect input validation exists, which can be...

Oracle Database Server security vulnerabilities

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database - Enterprise Edition Sharding that...

Oracle Database Server security vulnerabilities

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A denial of service vulnerability exists in Oracle Database - Enterprise Edition RDBMS...

Oracle MySQL input validation vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server 8.0.28 and earlier versions have a denial-of-service vulnerability in the Server: Optimizer component, which can be exploited by attackers to cause MySQL Server to hang or crash...

Database Vault Unauthorized Access

The vulnerability of the Database Vault component of the Oracle Database Server system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle Database Data Compromise

The vulnerability of the Oracle Database - Enterprise Edition component of the Oracle Database Server system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...