Executive Summary

This vulnerability exists in the Java VM component of the Oracle Database Server, specifically affecting versions 19.3 to 19.30 and 21.3 to 21.21.

It is an easily exploitable vulnerability that allows an unauthenticated attacker with network access via Oracle Net to compromise the Java VM.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through the Java VM.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is significant because it allows an attacker to gain unauthorized access to critical or all data accessible by the Java VM component of the Oracle Database Server.

Since the vulnerability can be exploited without authentication and remotely over the network, it poses a high risk of data compromise.

The CVSS score of 7.5 indicates a high severity, primarily affecting confidentiality, meaning sensitive information could be exposed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an unauthenticated attacker with network access to compromise the Java VM component of Oracle Database Server, potentially resulting in unauthorized access to critical or all Java VM accessible data.

Such unauthorized access to sensitive data could impact compliance with data protection standards and regulations like GDPR and HIPAA, which require safeguarding confidential information against unauthorized access.

However, the provided information does not explicitly describe the direct effects on compliance with these standards.

Useful 0 Not Useful 0