Database Server Vulnerability in Oracle's Core RDBMS Component
CVE-2020-2527

4.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
15 January 2020

What is CVE-2020-2527?

This vulnerability exists within the Core RDBMS component of Oracle Database Server, where a high-privileged attacker able to use Create Index and Create Table privileges, with network access through OracleNet, can exploit the weakness. Such an exploitation can lead to unauthorized read access to sensitive data within the RDBMS. The impact of attacks extends beyond the Core RDBMS, potentially affecting various interconnected products. Users should implement appropriate security measures to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Oracle Database 12.1.0.2

Oracle Database 12.2.0.1

Oracle Database 18c

References

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.