CVE-2017-10202: Critical severity ibm security identity manager vulnerability
An unspecified vulnerability in Oracle Database Server related to the OJVM component could allow an authenticated attacker to take control of the system.
Other sources
Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. While the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. Note: This score is for Windows platforms. On non-Windows platforms Scope is Unchanged, giving a CVSS Base Score of 8.8. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-10202?
CVE-2017-10202 is an unspecified vulnerability in Oracle Database Server related to the OJVM component.
What versions of Oracle Database Server are affected by CVE-2017-10202?
Oracle Database Server versions 11.2.0.4, 12.1.0.2, and 12.2.0.1 are affected by CVE-2017-10202.
How can CVE-2017-10202 be exploited?
CVE-2017-10202 can be exploited by a low privileged attacker with Create Session and Create Procedure privilege, who has network access via multiple protocols.
What is the severity of CVE-2017-10202?
CVE-2017-10202 has a severity rating of critical.
Where can I find more information about CVE-2017-10202?
You can find more information about CVE-2017-10202 at the following references: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html), [SecurityFocus](http://www.securityfocus.com/bid/99865), [SecurityTracker](http://www.securitytracker.com/id/1038923).