Skip to content
Sign in
Not rated

CVE-2017-10321 Vulnerability in the Core RDBMS component of Oracle Database Server

Description

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create session privilege with logon to the infrastructure where Core RDBMS executes to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 7.8 with scope Unchanged. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Affected products and versions

Product Affected versions Fixed in
Oracle Database 12.2.0.1 No fix stated
Oracle Database 12.1.0.2 No fix stated
Oracle Database 11.2.0.4 No fix stated

Other CVEs of Oracle Database

The 51 CVEs of Oracle Database →
CVE-2020-2969 Vulnerability in the Data Pump component of Oracle Database Server 6.6 Medium CVE-2020-2968 Vulnerability in the Java VM component of Oracle Database Server 8.0 High CVE-2020-2978 Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server 4.1 Medium CVE-2020-2734 Vulnerability in the RDBMS/Optimizer component of Oracle Database Server 2.4 Low
Track this CVE