PT-2021-21017
CVE-2021-35619
·
تاريخ النشر
2021-10-19
·
تاريخ التحديث
2021-10-26
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, and 21c
Description:
The issue affects the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM. This requires human interaction from a person other than the attacker and can result in the takeover of the Java VM.
Recommendations:
For version 12.1.0.2, update to a version that includes the fix for this issue.
For version 12.2.0.1, update to a version that includes the fix for this issue.
For version 19c, update to a version that includes the fix for this issue.
For version 21c, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Java VM component to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾