CVE-2023-22073: Medium severity oracle database vulnerability
Vulnerability in the Oracle Notification Server component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Notification Server executes to compromise Oracle Notification Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Notification Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-22073?
CVE-2023-22073 is a vulnerability in the Oracle Notification Server component of Oracle Database Server that affects certain versions.
What are the affected versions of Oracle Database Server?
The affected versions of Oracle Database Server are 19.3-19.20 and 21.3-21.11.
How severe is CVE-2023-22073?
CVE-2023-22073 has a severity rating of 4.3, which is considered medium.
What is the impact of CVE-2023-22073?
CVE-2023-22073 allows an unauthenticated attacker with access to the physical communication segment to exploit the vulnerability.
How can I fix CVE-2023-22073?
To fix CVE-2023-22073, it is recommended to apply the necessary security patches provided by Oracle.