跳转到帖子

Oracle Database: Critical Patch Update - October 2024 (CVE-2024-21242)

recommended_posts

发布于
  • Members

Oracle Database: Critical Patch Update - October 2024 (CVE-2024-21242)

Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:N/A:P)
Published
10/15/2024
Created
10/24/2024
Added
10/18/2024
Modified
01/28/2025

Description

Vulnerability in the XML Database component of Oracle Database Server.Supported versions that are affected are 19.3-19.24, 21.3-21.15 and23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via HTTP to compromise XML Database.Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of XML Database. CVSS 3.1 Base Score 3.5 (Availability impacts).CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).

Solution(s)

  • oracle-apply-oct-2024-cpu

References

  • https://attackerkb.com/topics/cve-2024-21242
  • CVE - 2024-21242
  • http://www.oracle.com/security-alerts/cpuoct2024.html
  • https://support.oracle.com/rs?type=doc&id=3036945.1
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…