CVE-2020-2512
Last modified
CVE-2020-2512 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. EPSS estimates a 1.47% chance of exploitation in the next 30 days.
Description
Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via OracleNet to compromise Database Gateway for ODBC. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Database Gateway for ODBC. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 11.2.0.4 |
| Oracle | Database Server | 12.1.0.2 |
| Oracle | Database Server | 12.2.0.1 |
| Oracle | Database Server | 18c |
| Oracle | Database Server | 19c |
References
- https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
- https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-2512?
How severe is CVE-2020-2512?
How do I fix CVE-2020-2512?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-25112An issue was discovered in the IPv6 stack in Contiki through…9.8
- CVE-2020-25115The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation…4.8
- CVE-2020-25116The Admin CP in vBulletin 5.6.3 allows XSS via an Announceme…4.8
- CVE-2020-25117The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Memb…4.8
- CVE-2020-25118The Admin CP in vBulletin 5.6.3 allows XSS via a Style Optio…4.8
- CVE-2020-25119The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a …4.8
- CVE-2020-25120The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/s…4.8
- CVE-2020-25121The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subs…4.8
- CVE-2020-25122The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type t…4.8
- CVE-2020-25123The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Titl…4.8
- CVE-2020-25124The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/at…4.8
- CVE-2020-25125GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array ov…7.8
Are you affected by CVE-2020-2512?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST