CVE-2024-20924

Summary

CVE-2024-20924 is a vulnerability affecting Oracle Audit Vault and Database Firewall's Firewall component, with versions 20.1-20.9 being susceptible. This issue allows high-privileged attackers with network access through Oracle Net to compromise the firewall, though successful attacks necessitate human interaction from an unsuspecting target. The impact of such breaches may extend beyond Oracle Audit Vault and Database Firewall, potentially threatening additional products. A successful exploitation of this vulnerability can lead to a complete takeover of the Oracle Audit Vault and Database Firewall, resulting in significant confidentiality, integrity, and availability risks. The Base Score, according to CVSS 3.1, is 7.6. (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.