Oracle Database Server Java VM Vulnerability Allowing Unauthenticated Data Modification

A vulnerability has been identified in the Java VM component of Oracle Database Server. This issue affects versions 19.3 through 19.28, 21.3 through 21.19, and 23.4 through 23.9. The vulnerability is difficult to exploit but allows an unauthenticated attacker with network access via Oracle Net to compromise the Java VM. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data, or any data accessible to the Java VM.

Impact

Exploitation of this vulnerability could result in unauthorized changes to critical data or any data accessible through the Java VM.