CVSS: 7.2EPSS: 1%CPEs: 3EXPL: 0CVE-2021-2337
https://notcve.org/view.php?id=CVE-2021-2337
20 Jul 2021 — Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in takeover of Oracle XML DB. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-2336
https://notcve.org/view.php?id=CVE-2021-2336
20 Jul 2021 — Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Data Redaction. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result... • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-2335
https://notcve.org/view.php?id=CVE-2021-2335
20 Jul 2021 — Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Data Redaction. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result... • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2021-2333
https://notcve.org/view.php?id=CVE-2021-2333
20 Jul 2021 — Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML DB accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-2334
https://notcve.org/view.php?id=CVE-2021-2334
20 Jul 2021 — Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Data Redaction. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result... • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 7.2EPSS: 1%CPEs: 3EXPL: 0CVE-2021-2329
https://notcve.org/view.php?id=CVE-2021-2329
20 Jul 2021 — Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in takeover of Oracle XML DB. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). • https://www.oracle.com/security-alerts/cpujul2021.html •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2021-2234
https://notcve.org/view.php?id=CVE-2021-2234
22 Apr 2021 — Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). • https://www.oracle.com/security-alerts/cpuapr2021.html •
CVSS: 4.1EPSS: 0%CPEs: 4EXPL: 2CVE-2021-2173 – Oracle DB Broken PDB Isolation / Metadata Exposure
https://notcve.org/view.php?id=CVE-2021-2173
22 Apr 2021 — Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recovery. While the vulnerability is in Recovery, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Recovery accessible dat... • https://packetstorm.news/files/id/171344 •
CVSS: 4.0EPSS: 0%CPEs: 4EXPL: 4CVE-2021-2175 – Oracle Database Vault Metadata Exposure
https://notcve.org/view.php?id=CVE-2021-2175
22 Apr 2021 — Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any View, Select Any View privilege with network access via Oracle Net to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Database Vault accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). • https://packetstorm.news/files/id/170373 •
CVSS: 2.3EPSS: 0%CPEs: 4EXPL: 1CVE-2021-2207 – Oracle RMAN Missing Auditing
https://notcve.org/view.php?id=CVE-2021-2207
22 Apr 2021 — Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having RMAN executable privilege with logon to the infrastructure where Oracle Database - Enterprise Edition executes to compromise Oracle Database - Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some ... • https://packetstorm.news/files/id/174448 •