Oracle Products Multiple Vulnerabilities
RISK: Extremely High Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in Oracle Products, a remote attacker could exploit some of these vulnerabilities to trigger denial of service, elevation of privilege, remote code execution, security restriction bypass, sensitive information disclosure and tampering on the targeted system.
[Updated on 2020-05-04]
One of the vulnerabilities (CVE-2020-2883) in Oracle WebLogic Server was currently being exploited in the wild. The risk level was increased to extremely high risk correspondingly.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
- Data Manipulation
System / Technologies affected
- MySQL
- Java SE
- Oracle Database Server
- Oracle VM VirtualBox
- Oracle WebLogic
For other Oracle products, please refer to the link below:
https://www.oracle.com/security-alerts/cpuapr2020.html
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
Oracle Critical Patch Update Advisory
Vulnerability Identifier
Source
Related Link
- https://blogs.oracle.com/security/apply-april-2020-cpu
- https://www.us-cert.gov/ncas/current-activity/2020/05/01/unpatched-oracle-weblogic-servers-vulnerable-cve-2020-2883
- https://www.zdnet.com/article/oracle-warns-of-attacks-against-recently-patched-weblogic-security-bug/
- https://www.oracle.com/security-alerts/cpuapr2020.html
Share with