CVE-2019-2571

Vulnerability in the RDBMS DataPump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Difficult to exploit vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle Net to compromise RDB...

CVE-2019-2517

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having DBFSROLE privilege with network access via Oracle Net to compromise Core RDBMS. While the...

CVE-2019-2517: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having DBFSROLE privilege with network access via Oracle Net to compromise Core RDBMS. While the...

CVE-2019-2582: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability ca...

CVE-2019-2571: Undefined Security Weakness

Vulnerability in the RDBMS DataPump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Difficult to exploit vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle Net to compromise RDB...

PT-2019-2007

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1 and 18c Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It allows a remote attacker to gain unauthorized access to protected...

PT-2019-2018

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c Description The issue is related to insufficient access control in the RDBMS DataPump component of Oracle Database Server. It can be exploited by a remote attacker with DBA...

Oracle Database Server Privilege Escalation

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to insufficient access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the DBMS using Oracle Net...

PT-2019-3120

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1 and 18c Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It can be exploited by a remote attacker to gain full control over the...

CVE-2019-2406

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...

CVE-2019-2406: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...

PT-2019-1229

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 18c Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It allows a high-privileged attacker with Create Session, Execute...

Oracle Database Server Java VM Full Control

The vulnerability of the Java VM component of the Oracle Database Server management system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using Oracle Net...

CVE-2018-3110

CVE-2018-3110 affects Oracle Database Server’s Java VM component. Affected versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18. An attacker with Create Session privilege and network access via Oracle Net can remotely exploit to take over the Java VM; impact may extend to other products. CVSSv3 base sc...

CVE-2018-3110: Undefined Security Weakness

A vulnerability was discovered in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to...

PT-2018-1442

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18 Description A vulnerability was discovered in the Java VM component of Oracle Database Server. The issue is related to inadequate access control. This easily exploitable...

CVE-2017-10282

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...

CVE-2017-10282: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...

PT-2018-5281

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 and 12.2.0.1 Description The issue is related to the Core RDBMS component of Oracle Database Server. It allows a high privileged attacker with Create Session, Execute Catalog Role privilege and network...

Oracle E-Business Suite Local Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle E-Business Suite has a local security...