Skip to content
Sign in
Not rated

CVE-2017-10261 Vulnerability in the XML Database component of Oracle Database Server

Description

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to compromise XML Database. While the vulnerability is in XML Database, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all XML Database accessible data. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 5.5 with scope Unchanged. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle Database 12.1.0.2 No fix stated
Oracle Database 11.2.0.4 No fix stated

Other CVEs of Oracle Database

The 51 CVEs of Oracle Database →
CVE-2020-2969 Vulnerability in the Data Pump component of Oracle Database Server 6.6 Medium CVE-2020-2968 Vulnerability in the Java VM component of Oracle Database Server 8.0 High CVE-2020-2978 Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server 4.1 Medium CVE-2020-2734 Vulnerability in the RDBMS/Optimizer component of Oracle Database Server 2.4 Low
Track this CVE