CVE-2021-2021

🗓️ 20 Jan 2021 14:50:02Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 521 Views🌐 WEB

Vulnerability in Oracle MySQL Server: Optimizer component. CVE-2021-202

Reporter	Title	Published	Views	Family All 125
0day.today	VMware vCenter Server Virtual SAN Health Check Remote Code Execution Exploit	16 Jul 202100:00	–	zdt
FreeBSD	MySQL -- Multiple vulnerabilities	23 Jan 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Oracle MySQL	16 Jun 202116:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilites	4 Nov 202117:25	–	ibm
ATTACKERKB	CVE-2021-21985	26 May 202100:00	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0220: mysql:8.0 (ALINUX3-SA-2022:0220)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : mysql:8.0 (CESA-2021:3590)	21 Sep 202100:00	–	nessus
Tenable Nessus	Fedora 32 : community-mysql / mysql-connector-odbc (2021-b1d1655cef)	16 Feb 202100:00	–	nessus
Tenable Nessus	Fedora 33 : community-mysql / mysql-connector-odbc (2021-db50ab62d3)	16 Feb 202100:00	–	nessus
Tenable Nessus	GLSA-202105-27 : MySQL: Multiple vulnerabilities	24 Jan 202200:00	–	nessus

NVD

Vulners

Node

oracle mysqlRange8.0.0–8.0.22

Node

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp snapcenterMatch-

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

[
  {
    "product": "MySQL Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.22 and prior"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/
security	www.security.gentoo.org/glsa/202105-27
security	www.security.netapp.com/advisory/ntap-20210219-0003/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/

Parameter	Position	Path	Description	CWE
methodInput	path	/ui/h5-vsan/rest/proxy/service/systemProperties/getProperty	Pre-auth exploitation via vsphere-ui systemProperties to disclose property values (SSRf/unsafe reflection enabling code execution in the UI plugin).
methodInput	path	/ui/h5-vsan/rest/proxy/service/vmodlContext/loadVmodlPackages	Vulnerability in loading Vmodl packages used to fetch an offline bundle which leads to command execution via a crafted payload.

17 Jun 2026 03:48Current

4.9Medium risk

Vulners AI Score4.9

CVSS 26.8

CVSS 3.14.9

EPSS0.10093

SSVC

In Wild