CVE-2019-2799

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 18c

Description The issue is related to the Oracle ODBC Driver component, which has a vulnerability that can be exploited by a low-privileged attacker with network access via multiple protocols. This can result in the takeover of the Oracle ODBC Driver. The vulnerability affects Windows platforms only.

Recommendations For versions 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18c, consider disabling the Oracle ODBC Driver component until a patch is available to prevent potential exploitation. As a temporary workaround, restrict access to the Oracle ODBC Driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.