CVE-2020-14742: Medium severity oracle database vulnerability

Published Oct 21, 2020

Updated

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYSDBA level account privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Core RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Affected Software

5 affected components

Oracle Core RDBMS=11.2.0.4

Oracle Core RDBMS=12.1.0.2

Oracle Core RDBMS=12.2.0.1

Oracle Core RDBMS=18c

Oracle Core RDBMS=19c

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2020.html

Event History

Oct 21, 2020

CVE Published

via MITRE·02:04 PM

Data Sourced

via MITRE·02:04 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-14742?

CVE-2020-14742 is a vulnerability in the Core RDBMS component of Oracle Database Server.

Which versions of Oracle Database Server are affected by CVE-2020-14742?

Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c are affected by CVE-2020-14742.

How can CVE-2020-14742 be exploited?

CVE-2020-14742 can be exploited by a high privileged attacker with SYSDBA level account privilege and network access via Oracle Net.

What is the severity of CVE-2020-14742?

CVE-2020-14742 has a severity rating of medium (2.7).

Where can I find more information about CVE-2020-14742?

You can find more information about CVE-2020-14742 [here](https://www.oracle.com/security-alerts/cpuoct2020.html).