Vulnerability in Oracle Application Express Affects Oracle Database Server

CVE-2020-2974

What is CVE-2020-2974?

A vulnerability exists in the Oracle Application Express component of Oracle Database Server, affecting versions 5.1 through 19.2. This issue can be exploited by low-privileged attackers with SQL Workshop privileges who have network access via HTTP. While attackers must rely on human interaction to execute their malicious activities, the fallout can affect various applications utilizing Oracle Application Express. Successful exploitation can lead to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reading of specific subsets of this data, putting sensitive information at risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References