CVEvulnerability

CVE-2025-50066

2.7 LOW Published 2025-07-15 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-269

Description

Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. Supported versions that are affected are 19.3-19.27, 21.3-21.18 and 23.4-23.8. Easily exploitable vulnerability allows high privileged attacker having Execute on DBMS_REDEFINITION privilege with network access via Oracle Net to compromise Oracle Database Materialized View. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database Materialized View accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Affected configurations

• oracle database server (>= 19.3 <= 19.27) • oracle database server (>= 21.3 <= 21.18) • oracle database server (>= 23.4 <= 23.8)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References