Vulnerability in Oracle Text Component of Oracle Database Server
CVE-2018-3299

8.2HIGH

Key Information:

Vendor
Oracle
Status
Text
Vendor
CVE Published:
17 October 2018

Summary

The vulnerability in the Oracle Text component of Oracle Database Server allows an unauthenticated attacker with network access to exploit the system via multiple protocols. Successful exploitation, requiring human interaction, leads to severe consequences including unauthorized data manipulation and potential Denial of Service attacks, resulting in application instability, such as crashes or hangs. This issue may also impact other Oracle products linked to Oracle Text, necessitating immediate attention by system administrators to protect data integrity and system availability.

Affected Version(s)

Text 11.2.0.4

Text 12.1.0.2

Text 12.2.0.1

References

http://www.securitytracker.com/id/1041890
vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/105648
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.