What is the vulnerability ID for this Oracle Database Server vulnerability?

The vulnerability ID for this Oracle Database Server vulnerability is CVE-2022-39419.

Which versions of Oracle Database Server are affected by this vulnerability?

This vulnerability affects Oracle Database Server versions 19c and 21c.

What privilege does an attacker need to exploit this vulnerability?

An attacker with Create Procedure privilege can exploit this vulnerability.

How can an attacker compromise the Java VM component through this vulnerability?

An attacker with network access via Oracle Net can compromise the Java VM component through this vulnerability.

What is the severity rating of this vulnerability?

The severity rating of this vulnerability is medium with a CVSS score of 4.3.

Vulnerability/
CVE-2022-39419

medium

4.3

18/10/2022

23/9/2024

CVE-2022-39419

First published: Tue Oct 18 2022(Updated: )

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java VM accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Credit: secalert_us@oracle.com

Affected Software	Affected Version	How to fix
Oracle Java Virtual Machine	=19c
Oracle Java Virtual Machine	=21c

Remedy

https://www.oracle.com/security-alerts/cpuoct2022.html

Never miss a vulnerability like this again

Reference Links

https://www.oracle.com/security-alerts/cpuoct2022.html

Frequently Asked Questions

What is the vulnerability ID for this Oracle Database Server vulnerability?
The vulnerability ID for this Oracle Database Server vulnerability is CVE-2022-39419.
Which versions of Oracle Database Server are affected by this vulnerability?
This vulnerability affects Oracle Database Server versions 19c and 21c.
What privilege does an attacker need to exploit this vulnerability?
An attacker with Create Procedure privilege can exploit this vulnerability.
How can an attacker compromise the Java VM component through this vulnerability?
An attacker with network access via Oracle Net can compromise the Java VM component through this vulnerability.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium with a CVSS score of 4.3.

collector/nvd-index
agent/type
agent/softwarecombine
agent/references
agent/remedy
agent/author
agent/tags
agent/severity
agent/first-publish-date
agent/event
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
vendor/oracle
canonical/oracle java virtual machine
version/oracle java virtual machine/19c
version/oracle java virtual machine/21c

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.