CVE-2024-21066: XSS
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with logon to the infrastructure where RDBMS executes to compromise RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all RDBMS accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21066?
CVE-2024-21066 is considered to be a high severity vulnerability due to its ease of exploitation and the potential impact it can have on affected Oracle Database Servers.
How do I fix CVE-2024-21066?
To fix CVE-2024-21066, it is recommended to apply the latest security updates provided by Oracle for the affected versions of Oracle Database Server.
Which versions of Oracle Database are affected by CVE-2024-21066?
CVE-2024-21066 affects Oracle Database Server versions 19.3 to 19.22 and 21.3 to 21.13.
Who can exploit CVE-2024-21066?
CVE-2024-21066 can be exploited by high privileged attackers who have Authenticated User privileges and access to the RDBMS infrastructure.
What components of Oracle Database does CVE-2024-21066 impact?
CVE-2024-21066 impacts the RDBMS component of the Oracle Database Server.