Vulnerability in Oracle Audit Vault and Database Firewall - Oracle
CVE-2024-20912

2.7LOW

Key Information:

Vendor

Oracle
Status
Audit Vault And Database Firewall
Vendor
CVE Published:
16 January 2024

What is CVE-2024-20912?

A vulnerability has been identified in Oracle Audit Vault and Database Firewall, affecting versions 20.1 through 20.9. This flaw allows an attacker with high privileges and network access via Oracle Net to compromise the system's functionality. Exploiting this vulnerability can lead to unauthorized modifications, such as updates, insertions, or deletions of data accessible within the Oracle Audit Vault and Database Firewall. The integrity of data may be at risk as a result of successful exploitation.

Affected Version(s)

Audit Vault and Database Firewall 20.1 <= 20.9

References

https://www.oracle.com/security-alerts/cpujan2024.html
vendor-advisory

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.