CVE-2021-2018

🗓️ 20 Jan 2021 14:50:02Reported by oracleType

Vulnerability in Oracle Database Server, affecting versions 18c and 19c. Allows unauthenticated attacker to compromise Advanced Networking Option. Windows platform only, with CVSS 3.1 Base Score 8.3

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt	7 Apr 202110:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management	7 Apr 202110:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing	7 Apr 202110:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Program Management	7 Apr 202110:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform	7 Apr 202110:02	–	ibm
CNNVD	Oracle Database Server 授权问题漏洞	19 Jan 202100:00	–	cnnvd
CNVD	Oracle Database Server Authorization Issues Vulnerability	20 Jan 202100:00	–	cnvd
Cvelist	CVE-2021-2018	20 Jan 202114:50	–	cvelist
EUVD	EUVD-2021-16477	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Oracle Database Server	21 Jan 202100:00	–	ncsc

NVD

Node

oracle advanced_networking_optionMatch18c

oracle advanced_networking_optionMatch19c

AND

microsoft windowsMatch-

Node

oracle adaptive_access_managerMatch11.1.2.3.0

oracle data_integratorMatch11.1.1.9.0

oracle data_integratorMatch12.2.1.3.0

oracle data_integratorMatch12.2.1.4.0

oracle enterprise_manager_for_fusion_applicationsMatch13.3.0.0

oracle hospitality_simphonyMatch18.2.7.2

oracle hospitality_simphonyMatch19.1.3

oracle weblogic_serverMatch12.2.1.3.0

[
  {
    "product": "Advanced Networking Option",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "18c"
      },
      {
        "status": "affected",
        "version": "19c"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html

21 Nov 2024 06:02Current

8.3High risk

Vulners AI Score8.3

CVSS 25.1

CVSS 3.18.3

EPSS0.01344

SSVC