CVE-2021-2021

🗓️ 20 Jan 2021 14:50:02Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 560 Views🌐 WEB

Vulnerability in Oracle MySQL Server: Optimizer component. CVE-2021-202

Reporter	Title	Published	Views	Family All 133
zdt	VMware vCenter Server Virtual SAN Health Check Remote Code Execution Exploit	16 Jul 202100:00	–	zdt
FreeBSD	MySQL -- Multiple vulnerabilities	23 Jan 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Oracle MySQL	16 Jun 202116:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilites	4 Nov 202117:25	–	ibm
attackerkb	CVE-2021-21985	26 May 202100:00	–	attackerkb
attackerkb	CVE-2021-2021	20 Jan 202115:15	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0220: mysql:8.0 (ALINUX3-SA-2022:0220)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : mysql:8.0 (CESA-2021:3590)	21 Sep 202100:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-ipadic / etc Multiple Vulnerabilities (crlsa-2021_3590)	1 Oct 202600:00	–	nessus
Tenable Nessus	Fedora 32 : community-mysql / mysql-connector-odbc (2021-b1d1655cef)	16 Feb 202100:00	–	nessus

NVD

Vulners

Node

oracle mysqlRange8.0.0–8.0.22

Node

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp snapcenterMatch-

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

[
  {
    "product": "MySQL Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.22 and prior"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/
security	www.security.gentoo.org/glsa/202105-27
security	www.security.netapp.com/advisory/ntap-20210219-0003/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/

Parameter	Position	Path	Description
methodInput	request body	/ui/h5-vsan/rest/proxy/service/systemProperties/getProperty	Check system property via systemProperties/getProperty to identify vsphere-ui context (pre-auth check in exploit).
user.name	request body	/ui/h5-vsan/rest/proxy/service/systemProperties/getProperty	Check system property via systemProperties/getProperty to identify vsphere-ui context (pre-auth check in exploit).
methodInput	nested	/ui/h5-vsan/rest/proxy/service/vmodlContext/loadVmodlPackages	Post-auth remote code execution by delivering an offline bundle payload to vmodlContext/loadVmodlPackages.

17 Jun 2026 03:48Current

4.9Medium risk

Vulners AI Score4.9

CVSS 26.8

CVSS 3.14.9

EPSS0.10012

SSVC

In Wild