Vulnetix
Try Vulnetix Request Demo
CVE-2019-2956 PUBLISHED CVSS 5.699999809265137 MEDIUM

Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to compromise Core RDBMS (jackson-databind). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Core RDBMS (jackson-databind). CVSS 3.0 Base Score 5.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

EPSS 0.44% · 62.8th percentile

Risk Scores

CVSS v3.1
5.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.44%
62.8th percentile

Affected Products

VendorProductVersions
oracledatabase_server19c, 12.1.0.2, 12.2.0.1
Oracle CorporationOracle Database12.1.0.2, 12.2.0.1, 18c

Timeline

References

Open in Interactive Console →