VDB
OSA-2021-37714-jul2022
OSA-2021-37714-jul2022
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Oracle Stream Analytics product of Oracle GoldenGate (component: Oracle Stream Analytics (jsoup)). Supported versions that are affected are 19c: prior to 19.1.0.0.6.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Stream Analytics. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Stream Analytics. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- Oct 31, 2022 CVE Published