Oracle Database Server JDBC Component Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the JDBC component of Oracle Database Server, affecting versions 23.4 through 23.8. This vulnerability, which is difficult to exploit, allows a low-privileged attacker with Authenticated OS User rights and access to the infrastructure where JDBC runs, to compromise JDBC. Successful exploitation requires human interaction from someone other than the attacker. While the vulnerability resides in JDBC, its effects could extend to other products, leading to a change in scope. Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data accessible through JDBC.

Impact

Exploitation of this vulnerability could lead to unauthorized access to critical data or full access to all data available through JDBC.