Skip to content
Sign in
4.1 Medium

CVE-2020-2978 Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server

Description

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While the vulnerability is in Oracle Database - Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle Database 19c No fix stated
Oracle Database 18c No fix stated
Oracle Database 12.2.0.1 No fix stated
Oracle Database 12.1.0.2 No fix stated

Other CVEs of Oracle Database

The 51 CVEs of Oracle Database →
CVE-2020-2969 Vulnerability in the Data Pump component of Oracle Database Server 6.6 Medium CVE-2020-2968 Vulnerability in the Java VM component of Oracle Database Server 8.0 High CVE-2020-2734 Vulnerability in the RDBMS/Optimizer component of Oracle Database Server 2.4 Low CVE-2020-2735 Vulnerability in the Java VM component of Oracle Database Server 8.0 High
Track this CVE