Oracle Products Multiple Vulnerabilities
Multiple vulnerabilities were identified in Oracle Products, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, data manipulation and bypass security restriction on the targeted system.
[Updated on 2024-09-19]
Updated Risk Level, Description, Source and Related Links.
One of the vulnerabilities (CVE-2020-14644) in Oracle WebLogic Server is exploited in the wild. The vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Hence, the risk level is rated from Medium Risk to Extremely High Risk.
RISK: Extremely High Risk
TYPE: Servers – Database Servers
Impact
- Denial of Service
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
- Data Manipulation
System / Technologies affected
- MySQL
- Java SE
- Oracle Database Server
For other Oracle products, please refer to the link below:
https://www.oracle.com/security-alerts/cpujul2020.html
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Oracle Critical Patch Update Advisory
Vulnerability Identifier
Source
Related Link
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
