CVE-2024-20912

Summary

CVE-2024-20912 is a newly identified vulnerability affecting Oracle Audit Vault and Database Firewall (version 20.1-20.9). This issue, situated within the Firewall component, is classified as easily exploitable. A high privileged attacker with network access via Oracle Net can exploit this vulnerability and gain unauthorized update, insert, or delete access to some of the Oracle Audit Vault and Database Firewall's data. The Base Score, according to CVSS 3.1, is 2.7, with impacts on data integrity. This vulnerability does not appear to pose a threat through user interface interactions or require specific user privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.