CVE-2020-2734: Low severity oracle database vulnerability
Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Execute on DBMSSQLTUNE privilege with network access via Oracle Net to compromise RDBMS/Optimizer. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS/Optimizer accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-2734?
CVE-2020-2734 is a vulnerability in the RDBMS/Optimizer component of Oracle Database Server that affects versions 12.1.0.2, 12.2.0.1, 18c, and 19c.
What is the severity of CVE-2020-2734?
CVE-2020-2734 has a severity rating of 2.4, which is considered low.
How can CVE-2020-2734 be exploited?
CVE-2020-2734 can be easily exploited by a high privileged attacker who has Execute on DBMS_SQLTUNE privilege and network access via Oracle Net.
Which versions of Oracle Database Server are affected by CVE-2020-2734?
The affected versions of Oracle Database Server are 12.1.0.2, 12.2.0.1, 18c, and 19c.
How can I mitigate CVE-2020-2734?
To mitigate CVE-2020-2734, Oracle recommends applying the necessary patches and updates provided in the security alert.