CVE-2020-2517

CVE-2020-2517 affects Oracle Database Server (Database Gateway for ODBC). A high-privilege attacker with Create Procedure and Create Database Link privileges over OracleNet can compromise the gateway, enabling unauthorized updates/inserts/deletes and a partial denial of service. Affected versions...

CVE-2020-2515

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via OracleN...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09959)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in the Database Gateway for ODBC component in Oracle Database Server 12.2.0.1, 18c, 19c. An...

Oracle Enterprise Manager for Oracle Database Denial of Service Vulnerability (CNVD-2020-09955)

Oracle Enterprise Manager for Oracle Database is Oracle's on-premise management platform for Oracle Database. A security vulnerability exists in the Discovery Framework component in Oracle Enterprise Manager for Oracle Database 12.1.0.5, 13.2.0.0, 13.3.0.0. An attacker could exploit this...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-04350)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An unspecified vulnerability exists in Oracl...

CVE-2020-2527: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Index, Create Table privilege with network access via OracleNet to compromi...

CVE-2020-2731: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02558)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to cause a takeover of t...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09960)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Core RDBMS component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02557)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to cause the ODBC databa...

CVE-2020-2517: Undefined Security Weakness

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Procedure, Create Database Link privilege with...

CVE-2020-2512: Undefined Security Weakness

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Database Gatew...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02559)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to cause the Core RDBMS ...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-04348)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to unauthorized update,...

CVE-2020-2569: Undefined Security Weakness

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...

CVE-2020-2511: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS...

Oracle Enterprise Manager for Oracle Database Denial of Service Vulnerability

Oracle Enterprise Manager for Oracle Database is Oracle's on-premise management platform for Oracle Database. A security vulnerability exists in the Change Manager - web based component in Oracle Enterprise Manager for Oracle Database 12.1.0.5, 13.2.0.0, 13.3.0.0. An attacker can exploit the...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09958)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Applications DBA component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-02555)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to gain read access to...

CVE-2020-2638: Undefined Security Weakness

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access...