CVE-2021-35576

🗓️ 20 Oct 2021 00:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 94 Views

Vulnerability in Oracle Database Enterprise Edition Unified Audit componen

Reporter	Title	Published	Views	Family All 22
0day.today	Oracle Unified Audit Policy Bypass Vulnerability	3 Jan 202300:00	–	zdt
0day.today	Oracle Database Vault Metadata Exposure Vulnerability	5 Jan 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Emptoris Supplier Lifecycle Management vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)	20 Apr 202205:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Emptoris Strategic Supply Management Platform is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)	19 Apr 202205:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Emptoris Sourcing is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)	19 Apr 202205:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Emptoris Program Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)	19 Apr 202205:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Emptoris Contract Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)	19 Apr 202205:55	–	ibm
CNNVD	Oracle Database Server 输入验证错误漏洞	19 Oct 202100:00	–	cnnvd
CNVD	Oracle Database Server has an unspecified vulnerability (CNVD-2021-84599)	20 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-35576	20 Oct 202100:00	–	cvelist

NVD

Vulners

Node

oracle database_serverMatch12.1.0.2enterprise

oracle database_serverMatch12.2.0.1enterprise

oracle database_serverMatch19centerprise

[
  {
    "vendor": "Oracle Corporation",
    "product": "Database - Enterprise Edition",
    "versions": [
      {
        "version": "12.1.0.2",
        "status": "affected"
      },
      {
        "version": "12.2.0.1",
        "status": "affected"
      },
      {
        "version": "19c",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/170354/Oracle-Unified-Audit-Policy-Bypass.html
packetstormsecurity	www.packetstormsecurity.com/files/170373/Oracle-Database-Vault-Metadata-Exposure.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
databasesecurityninja	www.databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/

21 Nov 2024 06:12Current

2.4Low risk

Vulners AI Score2.4

CVSS 3.12.7

CVSS 24

EPSS0.00753

SSVC