CVE-2024-21066

Severity
4.2MEDIUM
EPSS
0.2%
top 53.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 16
Latest updateApr 17

Description

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with logon to the infrastructure where RDBMS executes to compromise RDBMS. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete acce

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:NExploitability: 0.6 | Impact: 3.6

Affected Packages2 packages

NVDoracle/database_server19.319.22+1

🔴Vulnerability Details

2
GHSA
GHSA-xpw7-h5wm-8q7v: Vulnerability in the RDBMS component of Oracle Database Server2024-04-17
CVEList
CVE-2024-21066: Vulnerability in the RDBMS component of Oracle Database Server2024-04-16

📋Vendor Advisories

1
Oracle
Oracle Oracle Database Server Risk Matrix: RDBMS — CVE-2024-210662024-04-15