Vulnerability in Oracle Database Server's Core RDBMS Component

CVE-2020-2731

Summary

A vulnerability exists in the Core RDBMS component of Oracle Database Server, impacting versions 12.1.0.2, 12.2.0.1, 18c, and 19c. This issue enables a low-privileged attacker with Local Logon privilege to compromise the RDBMS after logging into the system. Exploitation of this vulnerability necessitates human interaction from a third party, which can lead to unauthorized updates, insertions, or deletions of accessible data within Core RDBMS. Additionally, it poses a risk of causing partial denial of service (partial DOS) to the Core RDBMS environment.

References