CVE-2022-21829: 
PHP vulnerability analysis and mitigation

CVE-2022-21829 is a security vulnerability affecting Oracle Database RDBMS Security that was disclosed in Oracle's January 2023 Critical Patch Update. The vulnerability requires Create Session privileges and affects Oracle Database versions 19c and 21c (Oracle CPU Jan 2023).

The vulnerability exists in the Oracle Database RDBMS Security component and requires Oracle Net protocol for exploitation. It has a CVSS Base Score of 6.3 with the following vector: Network Low Low Required Unchanged Low High None, indicating a moderate severity issue (Oracle CPU Jan 2023).

If successfully exploited, this vulnerability could result in low confidentiality impact and high integrity impact to the affected Oracle Database system, while having no impact on system availability (Oracle CPU Jan 2023).

The vulnerability requires network access and Create Session privileges for exploitation. It cannot be exploited remotely without authentication. The attack complexity is rated as low, indicating that the attack requires minimal specialized access conditions or extenuating circumstances (Oracle CPU Jan 2023).

Oracle has released security patches to address this vulnerability in their January 2023 Critical Patch Update. Organizations running affected versions of Oracle Database (19c and 21c) should apply the available security patches as soon as possible (Oracle CPU Jan 2023).