CVE-2020-14742Corporation Database Enterprise Edition vulnerability

5 documents5 sources
Severity
2.7LOWNVD
EPSS
0.2%
top 57.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 21
Latest updateMay 24

Description

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYSDBA level account privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Core RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:NExploitability: 1.2 | Impact: 1.4

Affected Packages2 packages

NVDoracle/core_rdbms5 versions+4

Patches

🔴Vulnerability Details

2
GHSA
GHSA-fvfh-gpm5-h38w: Vulnerability in the Core RDBMS component of Oracle Database Server2022-05-24
CVEList
CVE-2020-14742: Vulnerability in the Core RDBMS component of Oracle Database Server2020-10-21

📋Vendor Advisories

1
Oracle
Oracle Oracle Database Server Risk Matrix: Core RDBMS — CVE-2020-147422020-10-15

💬Community

1
Bugzilla
CVE-2018-14341 wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)2018-07-23
CVE-2020-14742 — LOW severity | cvebase