CVE Vulnerability

CVE-2022-21603

Vulnerability in the Oracle Database - Sharding component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with network access via Local Logon to compromise Oracle Database - Sharding. Successful attacks of this vulnerability can result in takeover of Oracle Database - Sharding. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

7.2 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpuoct2022.html Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:oracle:database_-_sharding:19c:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_-_sharding:21c:*:*:*:*:*:*:*
Information

Published : 2022-10-18 09:15

Updated : 2022-10-20 05:38

NVD link : CVE-2022-21603

Mitre link : CVE-2022-21603

Products Affected
No products.
CWE
NVD-CWE-noinfo