Oracle Database Server Java VM Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the Java VM component of Oracle Database Server. It affects versions 19.3 through 19.25, 21.3 through 21.16, and 23.4 through 23.6. This vulnerability is difficult to exploit but allows a low-privileged attacker with Create Session and Create Procedure privileges, and network access via Oracle Net, to compromise the Java VM. Successful exploitation could lead to unauthorized modification, addition, or deletion of certain Java VM accessible data, as well as unauthorized reading of a subset of that data.

Impact

Exploitation of this vulnerability could result in unauthorized access to modify, insert, or delete some data accessible to the Java VM, as well as unauthorized reading of certain Java VM accessible data.