Core RDBMS Vulnerability in Oracle Database Server

CVE-2019-2954

Summary

A vulnerability exists in the Core RDBMS component of Oracle Database Server, allowing low privileged attackers to exploit the system with Create Session and Create Procedure privileges. This exploit requires the attacker to have logon access to the infrastructure. If successfully executed, the vulnerability could lead to unauthorized modifications to data, including updates and deletions, as well as potential partial denial of service scenarios. Human interaction from an individual other than the attacker is necessary for the exploit to succeed, emphasizing the importance of user awareness in mitigating the risk.

References