CVE-2022-21432
published 2022-07-19CVE-2022-21432: Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are…
PriorityP47low2.7CVSS 3.1
AVNACLPRHUINSUCNINAL
EPSS
0.68%
48.2th percentile
Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition RDBMS Security. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database - Enterprise Edition RDBMS Security. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database | — | — |
| oracle | database | — | — |
| oracle | database | — | — |
| oracle_corporation | text | — | — |
| oracle_corporation | text | — | — |
| oracle_corporation | text | — | — |
CVSS provenance
nvdv3.12.7LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
vendor_oracle2.7LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Oracle
Oracle Oracle Database Server Risk Matrix: Oracle Text — CVE-2022-21432
vendor_oracle·2024-01-15·CVSS 2.7
CVE-2022-21432 [LOW] Oracle Oracle Database Server Risk Matrix: Oracle Text — CVE-2022-21432
Oracle Oracle Database Server Risk Matrix: Oracle Text vulnerability
CVE: CVE-2022-21432
CVSS: 2.7
Protocol: Oracle Net
Remote exploit: No
Affected versions: Network
Advisory: cpujan2024 (JAN 2024)
Oracle
Oracle Oracle Database Server Risk Matrix: Oracle Database - Enterprise Edition RDBMS Security — CVE-2022-21432
vendor_oracle·2022-07-15·CVSS 2.7
CVE-2022-21432 [LOW] Oracle Oracle Database Server Risk Matrix: Oracle Database - Enterprise Edition RDBMS Security — CVE-2022-21432
Oracle Oracle Database Server Risk Matrix: Oracle Database - Enterprise Edition RDBMS Security vulnerability
CVE: CVE-2022-21432
CVSS: 2.7
Protocol: Oracle Net
Remote exploit: No
Affected versions: Network
Advisory: cpujul2022 (JUL 2022)
GHSA
GHSA-xqx5-4x28-3m6v: Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server
ghsa_unreviewed·2022-07-20
CVE-2022-21432 [LOW] GHSA-xqx5-4x28-3m6v: Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server
Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition RDBMS Security. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database - Enterprise Edition RDBMS Security. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-07-19
Published