PT-2019-2782

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Description The issue is related to insufficient access control in the Java VM component, allowing a low-privileged attacker with Create Session and Create Procedure...

PT-2019-2018

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c Description The issue is related to insufficient access control in the RDBMS DataPump component of Oracle Database Server. It can be exploited by a remote attacker with DBA...

PT-2019-1862 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: Optimizer subcomponent. This allows an attacker with network access via multipl...

PT-2019-1923 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: A vulnerability in the MySQL Server component, specifically in the InnoDB subcomponent, allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL...

PT-2019-1928

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c Description The issue is related to a vulnerability in the Portable Clusterware component of Oracle Database Server, which can be exploited by a high-privileged attacker with...

PT-2019-2007

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1 and 18c Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It allows a remote attacker to gain unauthorized access to protected...

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

Oracle MySQL Server Partitioning Unauthorized Access

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or cause service failures...

Oracle MySQL Server DoS

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service interruptions...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Oracle MySQL Server Replication Unauthorized Access

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device remotely...

Oracle Database Server Privilege Escalation

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to insufficient access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the DBMS using Oracle Net...

Oracle Database Server Text Component Privilege Escalation

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, delete data, or cause service failures...

Oracle Database Server Privilege Escalation

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

PT-2019-3120

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1 and 18c Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It can be exploited by a remote attacker to gain full control over the...

CVE-2019-2547

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple...

CVE-2019-2444

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to compromise Cor...

CVE-2019-2444

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to compromise Cor...

CVE-2019-2406

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...