CVE-2023-21934 | Vulnetix

CVE-2023-21934 PUBLISHED CVSS 6.8 MEDIUM

Reported by oracle · Published April 18, 2023

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data as well as unauthorized access to critical data or complete access to all Java VM accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).

Risk scores

CVSS 3.1

6.8

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products

Vendor	Product	Versions
Oracle Corporation	Database - Enterprise Edition	19c, 21c
Oracle Corporation	Database - Enterprise Edition	19c, 21c

Timeline

Apr 18, 2023 CVE Published
Apr 19, 2023 EPSS Score (30 in total, the first dated here)
May 19, 2026 Coalition ESS Score
Jun 2, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2023-21934
vulnetix vdb fixes CVE-2023-21934

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-21934/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle Advisory vendor-advisory

Look up in the Resolve Platform →