CVE-2014-2406

High

Published: 16/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

An unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to 'Advisor' and 'Select Any Dictionary' privileges.

Risk Assessment

This vulnerability may lead to breaches of data confidentiality and integrity, posing a serious threat to organizations using these database versions.

Recommendation

It is recommended to upgrade to the latest version of Oracle Database Server to minimize the risk associated with this vulnerability.

Other vulnerabilities in Core RDBMS

CVE-2017-10321High
Vulnerability in the Core RDBMS component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. It allows easy exploitation by a low privileged attacker with Create session privilege, potentially leading to the takeover of Core RDBMS.

Original NVD description (English source)

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.