7.2
CVSSv3

CVE-2021-2054

Published: 20/01/2021 Updated: 26/01/2021
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

This vulnerability allows local malicious users to escalate privileges on affected installations of Oracle Database. Authentication is required to exploit this vulnerability. The specific flaw exists within the execution of stored procedures. When executing stored procedures, the process does not properly check the caller's privileges. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from users with limited privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle rdbms sharding 12.2.0.1

oracle rdbms sharding 18c

oracle rdbms sharding 19c