Java VM Vulnerability in Oracle Database Server Affects Multiple Versions

CVE-2023-21934

Summary

A vulnerability exists in the Java VM component of Oracle Database Server that affects versions 19c and 21c. It can be exploited by an attacker with User Account privilege who has network access via TLS. Exploitation enables the attacker to perform unauthorized actions, including the creation, deletion, or modification of critical data accessible through the Java VM. The vulnerability poses significant risks, as it could lead to unauthorized access to sensitive information and compromise the integrity and confidentiality of data managed by the Java VM.

References