What is CVE-2019-2571?

CVE-2019-2571 is a medium-severity vulnerability in Oracle Database Server. CVSS score: 6.6/10. Published 2019-04-23.

How severe is CVE-2019-2571?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Vulnerability in Oracle Database Server

CVE-2019-2571

Vulnerability in the RDBMS DataPump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Difficult to exploit vulnerability allows high privileged attacker having DBA role privilege with network access via Oracle Net to compromise RDBMS DataPump. Successful attacks of this vulnerability can result in takeover of RDBMS DataPump. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

EPSS: 0.011 (63.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Oracle Database_server — versions 11.2.0.4, 12.1.0.2, 12.2.0.1
Oracle Corporation Database — versions 11.2.0.4, 12.1.0.2, 12.2.0.1

References

secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-2571?: CVE-2019-2571 is a medium-severity vulnerability in Oracle Database Server. CVSS score: 6.6/10. Published 2019-04-23.
How severe is CVE-2019-2571?: Medium severity. CVSS v3 base score is 6.6 out of 10.