CVE-2022-39419

State: Published
Severity: 4.3 Medium
Published: Oct 18, 2022
Updated: Sep 23, 2024
Reserved: Sep 2, 2022

Description

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java VM accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	oracle

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Database - Enterprise EditionOracle Corporation	19cAffected 21cAffected

References

https://www.oracle.com/security-alerts/cpuoct2022.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.