CVE-2020-14901 - Vulnerability in the RDBMS Security component of Oracle Database Server

Back Back to CVE browser

MEDIUM

Vulnerability in the RDBMS Security component of Oracle Database Server

Published Oct 21, 2020

4.9

MEDIUM

CVSS 3.1

EPSS 1.48%

Description

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged attacker having Analyze Any privilege with network access via Oracle Net to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all RDBMS Security accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Affected products

Vendor Oracle Corporation Product Database - Enterprise Edition Default
n/a
- Version
  19c
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Database - Enterprise Edition

n/a

Version	Status	Constraints
19c	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://www.oracle.com/security-alerts/cpuoct2020.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.oracle.com/security-alerts/cpuoct2020.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner oracle

Published Oct 21, 2020

Updated Sep 26, 2024

Reserved Jun 19, 2020

Link CVE-2020-14901

CISA Vulnrichment

Updated Sep 26, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14901

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-14901