Vulnerability in Oracle Database - Enterprise Edition Recovery Component
CVE-2022-21511

7.2HIGH

Key Information:

Vendor
Oracle
Status
Database - Enterprise Edition
Vendor
CVE Published:
19 July 2022

Summary

A high-privilege vulnerability exists in the Oracle Database - Enterprise Edition Recovery component. An attacker with the EXECUTE ON DBMS_IR.EXECUTESQLSCRIPT privilege can exploit this flaw through network access via Oracle Net. Successfully exploiting this vulnerability can lead to a complete compromise of the database recovery capabilities, allowing unauthorized access and control over the affected database system.

Affected Version(s)

Database - Enterprise Edition None

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.