CVE-2023-21934

4 documents4 sources
Severity
6.8MEDIUM
EPSS
0.6%
top 31.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Database - Enterprise EditionOracle Database
Timeline
PublishedApr 18

Description

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data as well as unauthorized access to critical data or complete access to all J…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 1.6 | Impact: 5.2

Affected Packages2 packages

▶NVDoracle/database19c, 21c+1

🔴Vulnerability Details

2
CVEList
CVE-2023-21934: Vulnerability in the Java VM component of Oracle Database Server↗2023-04-18
▶
GHSA
GHSA-j6v5-4cj5-hfh4: Vulnerability in the Java VM component of Oracle Database Server↗2023-04-18
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Database Server Risk Matrix: Java VM — CVE-2023-21934↗2023-04-15
▶