Severity
High
Analysis Summary
CVE-2023-21893
Oracle Database Server could allow a remote attacker to gain elevated privileges on the system, caused by an error in the Oracle Data Provider for .NET component. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to take control of the system.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2023-21893
Affected Vendors
Oracle
Affected Products
- Oracle Database Server 19c
- Oracle Database Server 21c
Remediation
Refer to Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.