Oracle Database Server RDBMS Functional Index Vulnerability Allowing Unauthorized Data Access

Vulnerability

A vulnerability has been identified in the RDBMS Functional Index component of Oracle Database Server, specifically in versions 23.4 through 23.9. This easily exploitable vulnerability allows a high-privileged attacker with SYSDBA rights and network access via Oracle Net to compromise the RDBMS Functional Index. Successful exploitation of this vulnerability could lead to unauthorized read access to certain RDBMS Functional Index data.

Impact

Exploitation of this vulnerability could result in unauthorized access to a portion of RDBMS Functional Index data.

Added: Oct 21, 2025, 9:52 PM
Updated: Oct 21, 2025, 9:52 PM

Vulnerability Rating

Custom Algorithm
spread
7.3
impact
2.5
exploitability
4.8
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.