CVE-2015-4873: High severity oracle database vulnerability

Published Oct 21, 2015

Updated

Unspecified vulnerability in the Database Scheduler component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

3 affected components

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Event History

Oct 21, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4873?

CVE-2015-4873 is categorized as a critical vulnerability that affects the confidentiality, integrity, and availability of the affected Oracle Database versions.

How do I fix CVE-2015-4873?

To address CVE-2015-4873, users should apply the latest security patches provided by Oracle for the affected database versions.

Which Oracle Database versions are affected by CVE-2015-4873?

CVE-2015-4873 impacts Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2.

What impact does CVE-2015-4873 have on database security?

CVE-2015-4873 can compromise the confidentiality, integrity, and availability of data managed by the affected Oracle Database systems.

Are local users able to exploit CVE-2015-4873?

Yes, local users may exploit CVE-2015-4873 through unspecified vectors, making it critical to secure access to the database.