CVE-2012-3220: Critical severity oracle database vulnerability

Published Jan 17, 2013

Updated

Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

6 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

Event History

Jan 17, 2013

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3220?

CVE-2012-3220 is classified as a medium severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2012-3220?

To fix CVE-2012-3220, it is recommended to apply the latest patches and updates provided by Oracle for the affected versions of the database server.

Which versions of Oracle Database are affected by CVE-2012-3220?

CVE-2012-3220 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3.

Who is vulnerable to CVE-2012-3220?

Remote authenticated users with Create Session privileges are vulnerable to CVE-2012-3220.

What are the potential risks associated with CVE-2012-3220?

The potential risks associated with CVE-2012-3220 include unauthorized access that can compromise data confidentiality, integrity, and overall system availability.