CVE-2020-2978

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While the vulnerability is in Oracle Database - Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N).

• http://packetstormsecurity.com/files/172183/Oracle-RMAN-Missing-Auditing.html
• https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/Exploit, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Vendor Advisory
• http://packetstormsecurity.com/files/172183/Oracle-RMAN-Missing-Auditing.html
• https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/Exploit, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Vendor Advisory

Published

Jul 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2972Vulnerability in the Oracle Application Express component of…5.4
• CVE-2020-2973Vulnerability in the Oracle Application Express component of…5.4
• CVE-2020-2974Vulnerability in the Oracle Application Express component of…5.4
• CVE-2020-2975Vulnerability in the Oracle Application Express component of…5.4
• CVE-2020-2976Vulnerability in the Oracle Application Express component of…5.4
• CVE-2020-2977Vulnerability in the Oracle Application Express component of…4.6
• CVE-2020-2981Vulnerability in the Data Store component of Oracle Berkeley…7
• CVE-2020-2982Vulnerability in the Enterprise Manager Base Platform produc…7.1
• CVE-2020-2983Vulnerability in the Oracle Data Masking and Subsetting prod…7.1
• CVE-2020-2984Vulnerability in the Oracle Configuration Manager product of…7.1
• CVE-2020-3110A vulnerability in the Cisco Discovery Protocol implementati…8.8
• CVE-2020-3111A vulnerability in the Cisco Discovery Protocol implementati…8.8