← Volver a CVEs

CVE-2017-10292

N/A

Descripcion

Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create User privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.0 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado10/19/2017

Ultima modificacion4/20/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

oracle:database

Debilidades (CWE)

CWE-269

Referencias

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html(secalert_us@oracle.com)

http://www.securityfocus.com/bid/101350(secalert_us@oracle.com)

http://www.securitytracker.com/id/1039591(secalert_us@oracle.com)

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/101350(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039591(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.