CVE-2021-2155

🗓️ 22 Apr 2021 21:53:45Reported by oracleType

cve🔗 web.nvd.nist.gov👁 78 Views🌐 WEB

Vulnerability in Oracle One-to-One Fulfillment product of Oracle E-Business Suit

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2021-2155	22 Apr 202122:15	–	attackerkb
BDU FSTEC	The vulnerability of the Documents component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain access to update, modify, or delete data.	24 May 202100:00	–	bdu_fstec
CNNVD	Oracle E-Business Suite Oracle One-to-One Fulfillment 安全漏洞	20 Apr 202100:00	–	cnnvd
CNVD	Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-30939)	21 Apr 202100:00	–	cnvd
Cvelist	CVE-2021-2155	22 Apr 202121:53	–	cvelist
GithubExploit	Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys	25 Jan 202602:03	–	githubexploit
EUVD	EUVD-2021-16614	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Oracle E-Business Suite	21 Apr 202100:00	–	ncsc
NVD	CVE-2021-2155	22 Apr 202122:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2021	20 Apr 202100:00	–	oracle

NVD

Vulners

Node

oracle one-to-one_fulfillmentRange12.1.1–12.1.3

oracle one-to-one_fulfillmentRange12.2.3–12.2.10

[
  {
    "product": "One-to-One Fulfillment",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.1-12.1.3"
      },
      {
        "status": "affected",
        "version": "12.2.3-12.2.10"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2021.html

Parameter	Position	Path	Description
jump_table_index	request body	IOCTL_MEMMOVE	Arbitrary memory copy into kernel space via MEMMOVE_INPUT_BUFFER (jump_table_index 0x33) invoked by IOCTL_MEMMOVE, enabling memmove from userland to kernel addresses.
source	request body	IOCTL_MEMMOVE	Arbitrary memory copy into kernel space via MEMMOVE_INPUT_BUFFER (jump_table_index 0x33) invoked by IOCTL_MEMMOVE, enabling memmove from userland to kernel addresses.
destination	request body	IOCTL_MEMMOVE	Arbitrary memory copy into kernel space via MEMMOVE_INPUT_BUFFER (jump_table_index 0x33) invoked by IOCTL_MEMMOVE, enabling memmove from userland to kernel addresses.
length	request body	IOCTL_MEMMOVE	Arbitrary memory copy into kernel space via MEMMOVE_INPUT_BUFFER (jump_table_index 0x33) invoked by IOCTL_MEMMOVE, enabling memmove from userland to kernel addresses.

17 Jun 2026 03:48Current

4.6Medium risk

Vulners AI Score4.6

CVSS 24.3

CVSS 3.14.3

EPSS0.0078

SSVC