Rewterz Threat Advisory – CVE-2023-21893 – Oracle Database Server Oracle Data Provider for .NET Vulnerability

Severity

High

Analysis Summary

CVE-2023-21893

Oracle Database Server could allow a remote attacker to gain elevated privileges on the system, caused by an error in the Oracle Data Provider for .NET component. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to take control of the system.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2023-21893

Affected Vendors

Oracle

Affected Products

• Oracle Database Server 19c
• Oracle Database Server 21c

Remediation

Refer to Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.

Oracle Critical Patch Update Advisory