CVE-2024-21058

Summary

CVE-2024-21058 is a vulnerability affecting the Unified Audit component in Oracle Database Server. This issue impacts versions 19.3 to 19.22 and 21.3 to 21.13. A high privileged attacker with SYSDBA access and network connectivity via Oracle Net can exploit this easily exploitable vulnerability, leading to unauthorized creation, deletion, or modification of critical data or all Unified Audit data. The potential impact is significant, with a CVSS 3.1 Base Score of 4.9 (Integrity impacts). Attackers may gain unauthorized access to sensitive data through this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.