CVE-2019-2547

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java VM. CVSS 3.0 Base Score 3.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).

• http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106594Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106594Third Party Advisory, VDB Entry

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25464InputMapper 1.6.10 contains a buffer overflow vulnerability …6.7
• CVE-2019-25465Hisilicon HiIpcam V100R003 contains a directory traversal vu…8.7
• CVE-2019-25466Easy File Sharing Web Server 7.2 contains a local structured…8.6
• CVE-2019-25467Verypdf docPrint Pro 8.0 contains a structured exception han…8.6
• CVE-2019-25468NetGain EM Plus 10.1.68 contains a remote code execution vul…9.8
• CVE-2019-25469Folder Lock 7.7.9 contains a buffer overflow vulnerability i…6.9
• CVE-2019-25470eWON Firmware versions 12.2 to 13.0 contain an authenticatio…8.7
• CVE-2019-25471FileThingie 2.5.7 contains an arbitrary file upload vulnerab…9.8
• CVE-2019-25472IntelBras Telefone IP TIP200 and 200 LITE contain an unauthe…8.7
• CVE-2019-25473Clinic Pro contains a SQL injection vulnerability that allow…7.1
• CVE-2019-25474Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulne…6.9
• CVE-2019-25475SQL Server Password Changer 1.90 contains a buffer overflow …6.9