CVE-2017-10321
HighSummary
Vulnerability in the Core RDBMS component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. It allows easy exploitation by a low privileged attacker with Create session privilege, potentially leading to the takeover of Core RDBMS.
Risk Assessment
Attacks may significantly impact additional products, and successful exploitation can result in the takeover of Core RDBMS, posing serious threats to data integrity and availability.
Recommendation
It is recommended to update to the latest software versions and restrict access to the infrastructure where Core RDBMS operates to minimize the risk of exploitation.
Other vulnerabilities in Core RDBMS
Original NVD description (English source)
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create session privilege with logon to the infrastructure where Core RDBMS executes to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. Note: This score is for Windows platform version 11.2.0.4 of Database. For Windows platform version 12.1.0.2 and Linux, the score is 7.8 with scope Unchanged. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).