CVE-2020-2978 is a vulnerability in Oracle Database - Enterprise Edition, affecting versions 12.1.0.2, 12.2.0.1, 18c, and 19c. This medium-severity flaw (CVSS 4.1) allows a highly privileged attacker with DBA role and network access via Oracle Net to achieve unauthorized data modification (update, insert, delete) within the database. While easily exploitable, it requires high privileges and has a low integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.1.0.2CPE matchmatch criteria | cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:* | ||
12.2.0.1CPE matchmatch criteria | cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:* | ||
18cCPE matchmatch criteria | cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:* | ||
19dCPE matchmatch criteria | cpe:2.3:a:oracle:database:19d:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.