CVE-2019-2406

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/155725
• https://www.ibm.com/support/pages/node/6454587 (Advisory)
• http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• http://www.securityfocus.com/bid/106591

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6454587

Frequently Asked Questions

• What is CVE-2019-2406?

  CVE-2019-2406 is an unspecified vulnerability in the Core RDBMS component of Oracle Database Server.

• Which versions of Oracle Database Server are affected by CVE-2019-2406?

  Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 18c are affected by CVE-2019-2406.

• How severe is CVE-2019-2406?

  CVE-2019-2406 has a severity rating of 7.2 (high).

• How can CVE-2019-2406 be exploited?

  CVE-2019-2406 can be easily exploited by a high privileged attacker with Create Session and Execute Catalog Role privilege via Oracle Net with network access.

• Are there any references related to CVE-2019-2406?

  Yes, you can find more information about CVE-2019-2406 at the following references: [1] http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html, [2] http://www.securityfocus.com/bid/106591, [3] https://exchange.xforce.ibmcloud.com/vulnerabilities/155725