CVE-2017-10190
HighSummary
Vulnerability in the Java VM component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. Easily exploitable by a high privileged attacker, potentially leading to takeover of the Java VM.
Risk Assessment
An attacker with the appropriate privileges can gain control over the Java VM, significantly impacting other products in the infrastructure. Potential consequences include breaches of confidentiality, integrity, and availability of data.
Recommendation
It is recommended to update to the latest versions of Oracle Database Server and to restrict access to the infrastructure where the Java VM operates.
Other vulnerabilities in Java VM component of Oracle Database Server
Original NVD description (English source)
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructure where Java VM executes to compromise Java VM. While the vulnerability is in Java VM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).