Oracle Audit Vault and Database Firewall Vulnerability

CVE-2024-20910

What is CVE-2024-20910?

A vulnerability exists in Oracle Audit Vault and Database Firewall that could allow a high privileged attacker with network access via Oracle Net to compromise the system. This vulnerability could lead to unauthorized read access to sensitive data within Oracle Audit Vault and Database Firewall. While primarily associated with this product, successful exploitation may have repercussions across additional products due to the interconnected nature of database systems. It is critical for organizations utilizing affected versions to assess their security posture and implement appropriate mitigations to safeguard against potential attacks.

References