CVE-2021-35619

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, and 21c

Description: The issue affects the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM. This requires human interaction from a person other than the attacker and can result in the takeover of the Java VM.

Recommendations: For version 12.1.0.2, update to a version that includes the fix for this issue. For version 12.2.0.1, update to a version that includes the fix for this issue. For version 19c, update to a version that includes the fix for this issue. For version 21c, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Java VM component to minimize the risk of exploitation.