Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle Database Sharding. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Sharding. CVSS 3.1 Base Score 2.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L).
History

Tue, 03 Dec 2024 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 27 Nov 2024 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Oracle database Server
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*
Vendors & Products Oracle database Server

cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2024-04-16T21:25:56.479Z

Updated: 2024-12-03T16:31:26.811Z

Reserved: 2023-12-07T22:28:10.643Z

Link: CVE-2024-20995

cve-icon Vulnrichment

Updated: 2024-08-01T22:13:41.470Z

cve-icon NVD

Status : Modified

Published: 2024-04-16T22:15:12.793

Modified: 2024-12-03T17:15:08.597

Link: CVE-2024-20995

cve-icon Redhat

No data.