QID 20220

Date Published: 2021-04-21

QID 20220: Oracle Database 12.1.0.2 Critical Patch Update - April 2021 (Unauthenticated)

Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule.

Affected Software:
Oracle Database 12.1.0.2

QID Detection Logic (Unauthenticated):
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.

Successful exploitation could allow an attacker to compromise the database.

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as Medium - 4.3 severity.
  • Solution
    Customers are requested to refer to CPUAPR2021 to obtain details about how to deploy the update.

    Vendor References
    Software Advisories
    Advisory ID Software Component Link
    CPUAPR2021 URL Logo www.oracle.com/security-alerts/cpuapr2021.html