CVE-2017-10202

Reference Links

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.securityfocus.com/bid/99865
• http://www.securitytracker.com/id/1038923
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128941
• https://www.ibm.com/support/pages/node/6454587 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6454587

Frequently Asked Questions

• What is CVE-2017-10202?

  CVE-2017-10202 is an unspecified vulnerability in Oracle Database Server related to the OJVM component.

• What versions of Oracle Database Server are affected by CVE-2017-10202?

  Oracle Database Server versions 11.2.0.4, 12.1.0.2, and 12.2.0.1 are affected by CVE-2017-10202.

• How can CVE-2017-10202 be exploited?

  CVE-2017-10202 can be exploited by a low privileged attacker with Create Session and Create Procedure privilege, who has network access via multiple protocols.

• What is the severity of CVE-2017-10202?

  CVE-2017-10202 has a severity rating of critical.

• Where can I find more information about CVE-2017-10202?

  You can find more information about CVE-2017-10202 at the following references: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html), [SecurityFocus](http://www.securityfocus.com/bid/99865), [SecurityTracker](http://www.securitytracker.com/id/1038923).