Main Vulnerability Database Vulnerabilities #VU65647

Input validation error in Oracle Database Server - CVE-2017-10202

Published: July 21, 2022

Vulnerability identifier: #VU65647

CSH Severity: High

CVSS v4: 9.4 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]

CVE-ID: CVE-2017-10202

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to compromise OJVM

The vulnerability exists in the OJVM component of Oracle Database Server. A remote user with Create Session and Create Procedure privileges can pass specially crafted input to the application and compromise OJVM

Affected software

Oracle Database Server
IBM Security Verify Information Queue

How to mitigate CVE-2017-10202

Install updates from vendor's website.

IBM Security Verify Information Queue - update to 10.0.3

External References

Related Security Bulletins