CVE-2017-10292

Reference Links

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://www.securityfocus.com/bid/101350
• http://www.securitytracker.com/id/1039591
• https://exchange.xforce.ibmcloud.com/vulnerabilities/133726
• https://www.ibm.com/support/pages/node/6454587 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6454587

Frequently Asked Questions

• What is the severity of CVE-2017-10292?

  The severity of CVE-2017-10292 is low with a severity value of 2.3.

• What is the affected software for CVE-2017-10292?

  The affected software for CVE-2017-10292 is Oracle Database Server versions 11.2.0.4, 12.1.0.2, and 12.2.0.1, as well as IBM ISIM VA versions 7.0.2 and 7.0.1.

• Is CVE-2017-10292 easily exploitable?

  Yes, CVE-2017-10292 is easily exploitable.

• What privileges does an attacker need to exploit CVE-2017-10292?

  An attacker with high privileges having Create User privilege with logon to the infrastructure where RDBMS Security executes can exploit CVE-2017-10292.

• Is there a patch or fix available for CVE-2017-10292?

  Yes, Oracle has provided a security advisory with information on how to address CVE-2017-10292. Please refer to the Oracle website for more details.