Vulnerability in Oracle Database Server Core RDBMS Component
CVE-2021-2330

4.3MEDIUM

Key Information:

Vendor

Oracle
Status
Database - Enterprise Edition
Vendor
CVE Published:
21 July 2021

What is CVE-2021-2330?

An exploitable vulnerability resides in the Core RDBMS component of Oracle Database Server, specifically in version 19c. This flaw allows a low privileged attacker with Create Table privileges and network access via Oracle Net to compromise the Core RDBMS. Successful exploitation could lead to unauthorized actions, including the potential to cause a partial denial of service. The implications of this vulnerability primarily affect the availability of the database system.

Affected Version(s)

Database - Enterprise Edition 19c

References

https://www.oracle.com/security-alerts/cpujul2021.html
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.