CVE-2021-2021
🗓️ 20 Jan 2021 14:50:02Reported by oracleType
cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 536 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 127 |
|---|---|---|---|---|
| VMware vCenter Server Virtual SAN Health Check Remote Code Execution Exploit | 16 Jul 202100:00 | – | zdt | |
| MySQL -- Multiple vulnerabilities | 23 Jan 202100:00 | – | freebsd | |
| Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Oracle MySQL | 16 Jun 202116:56 | – | ibm | |
| Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilites | 4 Nov 202117:25 | – | ibm | |
| CVE-2021-21985 | 26 May 202100:00 | – | attackerkb | |
| CVE-2021-2021 | 20 Jan 202115:15 | – | attackerkb | |
| Alibaba Cloud Linux 3 : 0220: mysql:8.0 (ALINUX3-SA-2022:0220) | 14 May 202500:00 | – | nessus | |
| CentOS 8 : mysql:8.0 (CESA-2021:3590) | 21 Sep 202100:00 | – | nessus | |
| Fedora 32 : community-mysql / mysql-connector-odbc (2021-b1d1655cef) | 16 Feb 202100:00 | – | nessus | |
| Fedora 33 : community-mysql / mysql-connector-odbc (2021-db50ab62d3) | 16 Feb 202100:00 | – | nessus |
10
Node
OR
Node
OR
[
{
"product": "MySQL Server",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "8.0.22 and prior"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| methodInput | request body | /ui/h5-vsan/rest/proxy/service/systemProperties/getProperty | Pre-auth vulnerability via POST to systemProperties/getProperty exposing user.name property (uses SSRF/unsafe reflection in VSAN Health Check plugin) | |
| methodInput | request body | /ui/h5-vsan/rest/proxy/service/vmodlContext/loadVmodlPackages | RCE payload delivery endpoint via POST to loadVmodlPackages exploiting vCenter SSRF/remote package loading |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:48Current
4.9Medium risk
Vulners AI Score4.9
CVSS 26.8
CVSS 3.14.9
EPSS0.10093
SSVC