Core RDBMS Vulnerability in Oracle Database Server
CVE-2019-2954
What is CVE-2019-2954?
A vulnerability exists in the Core RDBMS component of Oracle Database Server, allowing low privileged attackers to exploit the system with Create Session and Create Procedure privileges. This exploit requires the attacker to have logon access to the infrastructure. If successfully executed, the vulnerability could lead to unauthorized modifications to data, including updates and deletions, as well as potential partial denial of service scenarios. Human interaction from an individual other than the attacker is necessary for the exploit to succeed, emphasizing the importance of user awareness in mitigating the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Database 11.2.0.4
Oracle Database 12.1.0.2
Oracle Database 12.2.0.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved