Oracle Zero Data Loss Recovery Appliance Software Security Vulnerability Allowing Unauthorized Read Access
Vulnerability
A vulnerability has been identified in the Oracle Zero Data Loss Recovery Appliance Software, specifically in the Security component. This issue affects versions 23.1.0 through 23.1.202509. The vulnerability is difficult to exploit and allows an unauthenticated attacker with network access via Oracle Net to compromise the software. Successful exploitation, which requires human interaction from a third party, can lead to unauthorized read access to a subset of data within the Oracle Zero Data Loss Recovery Appliance Software.
Impact
Exploitation of this vulnerability could result in unauthorized read access to certain data within the Oracle Zero Data Loss Recovery Appliance Software.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.