Java Virtual Machine Vulnerability in Oracle Database Server

CVE-2020-2735

What is CVE-2020-2735?

A vulnerability exists in the Java VM component of Oracle Database Server which could be exploited by a low privileged attacker who has Create Session privileges and network access via Oracle Net. This vulnerability necessitates human interaction from an individual other than the attacker to successfully execute an attack. Although the vulnerability is localized within the Java VM, it poses a risk of impacting other products significantly. If successfully exploited, the attacker could take control of the Java VM, resulting in potential breaches of confidentiality, integrity, and availability within the affected environment.

References