CVE-2022-39429

The CVE-2022-39429 entry affects Oracle Database Server’s Java VM component on 19c and 21c. The vulnerability is exploitable by a low-privilege attacker with Create Procedure privilege and network access via Oracle Net, enabling partial denial of service of the Java VM. This conclusion is support...

CVE-2022-39419

Oracle Database Server’s Java VM component (19c and 21c) is affected by CVE-2022-39419. A low-privilege attacker with Create Procedure privilege and network access via Oracle Net can read a subset of Java VM data due to a vulnerability in the Java VM component. The issue is documented across mult...

CVE-2021-35619

CVE-2021-35619 is a vulnerability in the Java VM component of Oracle Database Server affecting Oracle versions 12.1.0.2, 12.2.0.1, 19c and 21c. The issue allows a low-privilege attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM, with successful at...