CVE-2023-21969

MEDIUM Year: 2023
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-284
View all →

Vulnerability Description

Vulnerability in Oracle SQL Developer (component: Installation). Supported versions that are affected are Prior to 23.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SQL Developer executes to compromise Oracle SQL Developer. Successful attacks of this vulnerability can result in takeover of Oracle SQL Developer. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Related Vulnerabilities

CVE-2009-5150

MEDIUM
CVSS:6.7(Medium)

Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended sear...

CWE-2842009

CVE-2009-5151

MEDIUM
CVSS:6.7(Medium)

The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on...

CWE-2842009

CVE-2015-6851

MEDIUM
CVSS:6.7(Medium)

EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector.

CWE-2842015

CVE-2016-8793

MEDIUM
CVSS:6.7(Medium)

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versi...

CWE-2842016

CVE-2018-0428

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate wit...

CWE-2842018

CVE-2018-15371

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of a...

CWE-2842018