CVE-2024-20903: Medium severity Oracle Database Server vulnerability
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 and 21.3-21.12. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20903?
CVE-2024-20903 is rated as a high severity vulnerability, allowing an attacker with low privileges to compromise the system.
How do I fix CVE-2024-20903?
To fix CVE-2024-20903, apply the relevant security patches released by Oracle for affected versions of the Database Server.
Which versions of Oracle Database are affected by CVE-2024-20903?
CVE-2024-20903 affects Oracle Database versions 19.3 through 19.21 and 21.3 through 21.12.
What type of attacker can exploit CVE-2024-20903?
CVE-2024-20903 can be exploited by low privileged attackers who have Create Session and Create Procedure privileges.
How does CVE-2024-20903 compromise Oracle Database?
CVE-2024-20903 is easily exploitable via Oracle Net, allowing unauthorized actions against the database.