CVE-2021-2245: 
Oracle Database Server vulnerability analysis and mitigation

Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 18c and 19c. The vulnerability was disclosed in April 2021 as part of Oracle's Critical Patch Update (Oracle CPU).

The vulnerability allows high privileged attackers having Create Audit Policy privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Unified Audit. The vulnerability has a CVSS Base Score of 2.7 (LOW) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N (NVD, Oracle CPU).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition Unified Audit accessible data (Oracle CPU).

The vulnerability is easily exploitable but requires high privileges with the Create Audit Policy permission. The attack requires network access via Oracle Net protocol (Oracle CPU).

Oracle has released patches for affected versions (18c and 19c) as part of the April 2021 Critical Patch Update. Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible (Oracle CPU).