CVE-2020-2518: High severity Oracle Database Server vulnerability
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-2518?
CVE-2020-2518 is a vulnerability in the Java VM component of Oracle Database Server.
Which versions of Oracle Database Server are affected by CVE-2020-2518?
The affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c.
What is the severity of CVE-2020-2518?
CVE-2020-2518 has a severity rating of 7.5 (high).
How can the CVE-2020-2518 vulnerability be exploited?
The vulnerability can be exploited by a low privileged attacker with Create Session privilege and network access via multiple protocols.
Is there a fix available for CVE-2020-2518?
Yes, Oracle has released security patches to address this vulnerability. It is recommended to apply the latest patches as soon as possible.