CVE-2019-2753

3 documents3 sources
Severity
4.6MEDIUM
EPSS
0.2%
top 52.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation TextOracle Database Server
Timeline
PublishedJul 23
Latest updateMay 24

Description

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Oracle Text. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Text acc…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:LExploitability: 2.1 | Impact: 2.5

Affected Packages2 packages

▶NVDoracle/database_server4 versions+3
▶CVEListV5oracle_corporation/text4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jqrx-jm2h-qhpj: Vulnerability in the Oracle Text component of Oracle Database Server↗2022-05-24
▶
CVEList
CVE-2019-2753: Vulnerability in the Oracle Text component of Oracle Database Server↗2019-07-23
▶