CVE-2021-2335: 
Oracle Database Server vulnerability analysis and mitigation

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server affects versions 12.1.0.2, 12.2.0.1, and 19c. This vulnerability allows low privileged attackers with Create Session privilege to access the system via Oracle Net (Oracle Advisory, NVD).

The vulnerability has a CVSS 3.1 Base Score of 3.5 (Integrity impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N. The attack requires network access and human interaction from a person other than the attacker. The vulnerability requires Create Session privilege for exploitation (Oracle Advisory, NVD).

Successful exploitation can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition Data Redaction accessible data (Oracle Advisory, NVD).

The vulnerability is considered easily exploitable but requires both Create Session privilege and human interaction from someone other than the attacker for successful exploitation (Oracle Advisory).

Oracle has released patches for this vulnerability as part of the July 2021 Critical Patch Update. Affected customers should apply the security patches to the impacted Database versions 12.1.0.2, 12.2.0.1, and 19c (Oracle Advisory).