CVE-2019-2582: Medium severity oracle database vulnerability

Published Apr 23, 2019

Updated

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

2 affected components

Oracle Database Server=12.2.0.1

Oracle Database Server=18c

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Event History

Apr 23, 2019

CVE Published

via MITRE·06:16 PM

Data Sourced

via MITRE·06:16 PM

DescriptionWeakness

Data Sourced

via NVD·07:32 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Oracle Database Server vulnerability?

The vulnerability ID is CVE-2019-2582.

Which versions of Oracle Database Server are affected by CVE-2019-2582?

Versions 12.2.0.1 and 18c of Oracle Database Server are affected.

Is this vulnerability easily exploitable?

Yes, this vulnerability is easily exploitable.

How can an attacker exploit CVE-2019-2582?

An unauthenticated attacker with network access via Oracle Net can exploit this vulnerability.

What is the severity rating of CVE-2019-2582?

The severity rating of CVE-2019-2582 is medium with a value of 5.3.