The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users,. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 54.9%.
Oracle
Authentication Bypass
Database Server
Primavera P6 Enterprise Project Portfolio Management
NVD
Exploit-DB
CVSS 2.0
6.4
EPSS
54.9%
Threat
4.4