CVE-2021-2334: 
Oracle Database Server vulnerability analysis and mitigation

CVE-2021-2334 is a vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. The vulnerability affects versions 12.1.0.2, 12.2.0.1, and 19c. It was disclosed in July 2021 as part of Oracle's Critical Patch Update. This is an easily exploitable vulnerability that allows low privileged attackers with Create Session privilege to compromise the Data Redaction component via Oracle Net (Oracle Advisory).

The vulnerability has a CVSS 3.1 Base Score of 3.5 (Low severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N. The attack requires network access via Oracle Net and needs human interaction from someone other than the attacker. The attacker must have Create Session privilege to exploit the vulnerability (NVD).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition Data Redaction accessible data. The vulnerability only affects data integrity, with no impact on confidentiality or availability (Oracle Advisory).

The vulnerability is considered easily exploitable but requires the attacker to have Create Session privilege and network access via Oracle Net. Additionally, successful exploitation requires human interaction from a person other than the attacker (NVD).

Oracle has released patches for this vulnerability as part of the July 2021 Critical Patch Update. The patches are available for affected versions 12.1.0.2, 12.2.0.1, and 19c. Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible (Oracle Advisory).