CVE-2024-21233

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.24 Oracle Database Server versions 21.3 through 21.15 Oracle Database Server versions 23.4 through 23.5

Description The issue is related to improper authorization in the Database Core Component of Oracle Database Server. This can allow a remote attacker to gain unauthorized access to read, modify, or delete data. Successful attacks can result in unauthorized update, insert, or delete access to some of the Oracle Database Core accessible data.

Recommendations For versions 19.3 through 19.24, update to a version outside of this range to mitigate the risk. For versions 21.3 through 21.15, update to a version outside of this range to mitigate the risk. For versions 23.4 through 23.5, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting network access via Oracle Net to minimize the risk of exploitation.