CVE-2024-20910

Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall)

Low · published January 16, 2024

CVSS v3.1
3.0
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. While the vulnerability is in Oracle Audit Vault and Database Firewall, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Audit Vault and Database Firewall accessible data. CVSS 3.1 Base Score 3.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N).

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Published
2024-01-16T21:41Z
EPSS history
Timeline
  • 16 JAN 21:41Z
    Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall)
    cvelistv5