Skip to content
2.7 Low

CVE-2021-2326 Vulnerability in the Database Vault component of Oracle Database Server

Description

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Database Vault accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Database - Enterprise Edition 19c No fix stated
Database - Enterprise Edition 12.2.0.1 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 64 CVEs of Database - Enterprise Edition →
Track this CVE