CVEvulnerability
CVE-2020-5359
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-252, CWE-544
Description
Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.
Affected configurations
• dell bsafe micro-edition-suite (< 4.5)
• oracle database 12.1.0.2
• oracle database 12.2.0.1
• oracle database 18c
• oracle database 19c
• oracle weblogic server proxy plug-in 11.1.1.9.0
• oracle weblogic server proxy plug-in 12.2.1.3.0
• oracle weblogic server proxy plug-in 12.2.1.4.0
Related
References
- https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities Vendor Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
- https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities Vendor Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory