RDBMS Vulnerability in Oracle Database Server Software
CVE-2019-2955

3.9LOW

Key Information:

Vendor

Oracle

Vendor
CVE Published:
16 October 2019

What is CVE-2019-2955?

A vulnerability in Oracle's Core RDBMS component allows low privileged attackers with Local Logon rights to exploit the system. While this attack requires user interaction from a third party, successful exploitation can enable unauthorized updates, inserts, or deletions of data accessible in Core RDBMS. Additionally, it poses a risk of causing a partial denial of service, impacting data availability. Organizations using affected versions of Oracle Database Server should take immediate action to secure their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Oracle Database 11.2.0.4

Oracle Database 12.1.0.2

Oracle Database 12.2.0.1

References

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.