Progress Datadirect Odbc Oracle Wire Protocol Driver vulnerabilities

2 CVEs affecting Progress Datadirect Odbc Oracle Wire Protocol Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34364, published 2023-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34364, published 2023-06-09. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer…
CVE-2023-34363, published 2023-06-09. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. When using Oracle Advanced Security (OAS) encryption, if an error is encountered initializing the…