Low severity1.9NVD Advisory· Published Aug 8, 2017· Updated May 13, 2026
CVE-2017-10120
CVE-2017-10120
Description
Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of RDBMS Security accessible data. CVSS 3.0 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).
Affected products
2- cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
- Oracle Corporation/Oracle Databasev5Range: 12.1.0.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/99867nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038923nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.