Description

CVE-2024-21184 is a vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. It allows a high-privileged attacker with Execute on SYS.XS_DIAG privilege and network access via Oracle Net to compromise Oracle Database RDBMS Security. Successful exploitation can lead to a takeover of Oracle Database RDBMS Security. The CVSS score is 7.2, indicating a high severity level. However, the SOCRadar Vulnerability Risk Score (SVRS) is 38, suggesting a moderate risk level.

Key Insights

• The vulnerability is easily exploitable, requiring only a high privilege level and network access.
• Successful exploitation can result in a complete takeover of Oracle Database RDBMS Security.
• The vulnerability affects all supported versions of Oracle Database Server from 19.3 to 19.23.

Mitigation Strategies

• Apply the latest security patches from Oracle.
• Restrict network access to the database server.
• Implement strong authentication and authorization mechanisms.
• Regularly monitor the database server for suspicious activity.

Additional Information

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• Exploit Status: No active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: The vulnerability is not currently being exploited in the wild.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.