CVE-2022-39429

The CVE-2022-39429 entry affects Oracle Database Server’s Java VM component on 19c and 21c. The vulnerability is exploitable by a low-privilege attacker with Create Procedure privilege and network access via Oracle Net, enabling partial denial of service of the Java VM. This conclusion is support...

CVE-2022-39419

Oracle Database Server’s Java VM component (19c and 21c) is affected by CVE-2022-39419. A low-privilege attacker with Create Procedure privilege and network access via Oracle Net can read a subset of Java VM data due to a vulnerability in the Java VM component. The issue is documented across mult...

CVE-2021-35619

CVE-2021-35619 is a vulnerability in the Java VM component of Oracle Database Server affecting Oracle versions 12.1.0.2, 12.2.0.1, 19c and 21c. The issue allows a low-privilege attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM, with successful at...

CVE-2021-2438

CVE-2021-2438 affects the Java VM component of Oracle Database Server. Affected versions include Oracle 12.1.0.2, 12.2.0.1, and 19c. A low-privileged attacker with Create Procedure privilege and network access via Oracle Net can exploit this to cause partial denial of service of the Java VM. The ...

CVE-2020-14743

CVE-2020-14743 is a vulnerability in the Oracle Database Server Java VM component affecting 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue allows a low-privileged attacker with Create Procedure privilege and network access via multiple protocols to compromise the Java VM, potentially leadi...