deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5427
Published: 2019-04-22
Description: c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776, CWE-776
References: https://hackerone.com/reports/509315; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4/
CVE: CVE-2019-5428
Published: 2019-04-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-0218
Published: 2019-04-22
Description: A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108046; https://lists.apache.org/thread.html/18a7ff26bc31a77e32e5e02e65dc86b1c41b610c753f8927d2cf955a%40%3Cdev.ponymail.apache.org%3E; https://www.openwall.com/lists/oss-security/2019/04/20/1
CVE: CVE-2019-11383
Published: 2019-04-22
Description: An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/shared_prefs/com.medhaapps.wififtpserver_preferences.xml
CVSS Score: 9.8 (CRITICAL)
References: https://pastebin.com/6uT9jhDR; https://pastebin.com/6uT9jhDR
CVE: CVE-2019-11459
Published: 2019-04-22
Description: The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754, CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00089.html; https://access.redhat.com/errata/RHSA-2019:3553; https://gitlab.gnome.org/GNOME/evince/issues/1129
CVE: CVE-2019-11460
Published: 2019-04-22
Description: An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.html; https://gitlab.gnome.org/GNOME/gnome-desktop/issues/112; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5V6EIUHYR7SNKCRIGYCD3UWNEGFNT2F/
CVE: CVE-2019-8452
Published: 2019-04-22
Description: A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-65, CWE-59
References: http://packetstormsecurity.com/files/154754/CheckPoint-Endpoint-Security-Client-ZoneAlarm-Privilege-Escalation.html; https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012; https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960
CVE: CVE-2013-7470
Published: 2019-04-23
Description: cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b; https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b
CVE: CVE-2019-11463
Published: 2019-04-23
Description: A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/libarchive/libarchive/commit/ba641f73f3d758d9032b3f0e5597a9c6e593a505; https://github.com/libarchive/libarchive/issues/1165; https://access.redhat.com/security/cve/cve-2019-11463
CVE: CVE-2019-11469
Published: 2019-04-23
Description: Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Action(s)" feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/152607/ManageEngine-Applications-Manager-14.0-SQL-Injection-Command-Injection.html; https://pentest.com.tr/exploits/ManageEngine-App-Manager-14-Auth-Bypass-Remote-Command-Execution.html; https://www.exploit-db.com/exploits/46740
CVE: CVE-2018-17169
Published: 2019-04-23
Description: An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVSS Score: 7.7 (HIGH)
CWE: CWE-611
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17169-XXE-PrinterON; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17169-XXE-PrinterON
CVE: CVE-2018-20819
Published: 2019-04-23
Description: io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/dropbox/lepton/issues/112; https://github.com/dropbox/lepton/issues/112
CVE: CVE-2018-20820
Published: 2019-04-23
Description: read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761; https://github.com/dropbox/lepton/issues/111; https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
CVE: CVE-2018-20821
Published: 2019-04-23
Description: The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-20822
Published: 2019-04-23
Description: LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2019-11470
Published: 2019-04-23
Description: The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; https://github.com/ImageMagick/ImageMagick/commit/e3cdce6fe12193f235b8c0ae5efe6880a25eb957
CVE: CVE-2019-11471
Published: 2019-04-23
Description: libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/strukturag/libheif/commit/995a4283d8ed2d0d2c1ceb1a577b993df2f0e014; https://github.com/strukturag/libheif/issues/123; https://github.com/strukturag/libheif/commit/995a4283d8ed2d0d2c1ceb1a577b993df2f0e014
CVE: CVE-2019-11472
Published: 2019-04-23
Description: ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; https://github.com/ImageMagick/ImageMagick/issues/1546
CVE: CVE-2019-11473
Published: 2019-04-23
Description: coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd; http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html
CVE: CVE-2019-11474
Published: 2019-04-23
Description: coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-682, CWE-787
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd; http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html
CVE: CVE-2017-12619
Published: 2019-04-23
Description: Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone".
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: http://www.openwall.com/lists/oss-security/2019/04/23/1; http://www.securityfocus.com/bid/108050; https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E
CVE: CVE-2018-1317
Published: 2019-04-23
Description: In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2019/04/23/1; http://www.securityfocus.com/bid/108047; https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E
CVE: CVE-2018-1328
Published: 2019-04-23
Description: Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/04/23/1; http://www.securityfocus.com/bid/108047; https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E
CVE: CVE-2017-15716
Published: 2019-04-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2019-0223
Published: 2019-04-23
Description: While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
CVSS Score: 7.4 (HIGH)
References: http://www.openwall.com/lists/oss-security/2019/04/23/4; http://www.securityfocus.com/bid/108044; https://access.redhat.com/errata/RHSA-2019:0886
CVE: CVE-2019-7303
Published: 2019-04-23
Description: A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-628
References: https://usn.ubuntu.com/3917-1/; https://www.exploit-db.com/exploits/46594; https://usn.ubuntu.com/3917-1/
CVE: CVE-2019-7304
Published: 2019-04-23
Description: Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://usn.ubuntu.com/3887-1/; https://www.exploit-db.com/exploits/46361; https://www.exploit-db.com/exploits/46362
CVE: CVE-2019-10864
Published: 2019-04-23
Description: The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wp-statistics/wp-statistics/commit/5aec0a08680f0afea387267a8d1b9fbb3379247c; https://medium.com/%40aramburu/cve-2019-10864-wordpress-7aebc24751c4; https://github.com/wp-statistics/wp-statistics/commit/5aec0a08680f0afea387267a8d1b9fbb3379247c
CVE: CVE-2019-11076
Published: 2019-04-23
Description: Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://docs.cribl.io/blog/release-v151; https://github.com/livehybrid/poc-cribl-rce; https://docs.cribl.io/blog/release-v151
CVE: CVE-2018-2880
Published: 2019-04-23
Description: Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS Retail-J. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MICROS Retail-J accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2018-3120
Published: 2019-04-23
Description: Vulnerability in the MICROS Lucas component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.9.5.6 and 2.9.5.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Lucas. Successful attacks of this vulnerability can result in takeover of MICROS Lucas. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2018-3123
Published: 2019-04-23
Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS Score: 5.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; https://support.f5.com/csp/article/K58502649; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2018-3312
Published: 2019-04-23
Description: Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications (subcomponent: Segment). Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail Customer Engagement. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Retail Customer Engagement accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Engagement accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Engagement. CVSS 3.0 Base Score 5.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L).
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2018-3314
Published: 2019-04-23
Description: Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Customer). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software. While the vulnerability is in MICROS Relate CRM Software, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MICROS Relate CRM Software accessible data as well as unauthorized access to critical data or complete access to all MICROS Relate CRM Software accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2019-2424
Published: 2019-04-23
Description: Vulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail Applications (subcomponent: Level 3 Maintenance Functions). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Convenience Store Back Office. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Convenience Store Back Office accessible data as well as unauthorized read access to a subset of Oracle Retail Convenience Store Back Office accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Convenience Store Back Office. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
CVSS Score: 7.3 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2019-2516
Published: 2019-04-23
Description: Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure where Portable Clusterware executes to compromise Portable Clusterware. While the vulnerability is in Portable Clusterware, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Portable Clusterware. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 8.2 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2019-2517
Published: 2019-04-23
Description: Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having DBFS_ROLE privilege with network access via Oracle Net to compromise Core RDBMS. While the vulnerability is in Core RDBMS, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Core RDBMS. CVSS 3.0 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 9.1 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2019-2518
Published: 2019-04-23
Description: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html