CVE-2017-10120: Low severity oracle database vulnerability
Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.0 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10120?
The severity of CVE-2017-10120 is classified as low.
How do I fix CVE-2017-10120?
To fix CVE-2017-10120, ensure that you apply the latest security patches provided by Oracle for Oracle Database Server 12.1.0.2.
What versions of Oracle Database are affected by CVE-2017-10120?
CVE-2017-10120 specifically affects Oracle Database Server version 12.1.0.2.
Who is primarily at risk from CVE-2017-10120?
High privileged attackers who have Create Session and Select Any Dictionary privileges are primarily at risk from CVE-2017-10120.
How can CVE-2017-10120 be exploited?
CVE-2017-10120 is a difficult to exploit vulnerability that requires high privileges on the RDBMS Security component.