CVE-2021-2329

CVE-2021-2329 is an Oracle Database Server vulnerability affecting the XML DB component in versions 12.1.0.2, 12.2.0.1, and 19c. The vulnerability enables a high-privilege attacker with Create Any Procedure and Create Public Synonym privileges, over a network via Oracle Net, to take over the Orac...

CVE-2021-2333

CVE-2021-2333 affects Oracle Database Server’s XML DB component. Impacted: Oracle versions 12.1.0.2, 12.2.0.1, and 19c. An attacker with Alter User privilege and network access via Oracle Net can gain unauthorized access to Oracle XML DB data. CVSSv3.1 base score: 4.9 (Confidentiality only). Reme...