Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-35576
HistoryOct 20, 2021 - 11:16 a.m.

CVE-2021-35576

2021-10-2011:16:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
50
4
cve-2021-35576
oracle
database
enterprise edition
unified audit
vulnerability
security
nvd
cvss
update
insert
delete
integrity impact

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

2.5 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.029 Low

EPSS

Percentile

90.7%

JSON

Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with network access via Oracle Net to compromise Oracle Database Enterprise Edition Unified Audit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database Enterprise Edition Unified Audit accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

VendorProductVersionCPE
oracleenterprise_manager_for_oracle_database*cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:*:*:*:*:*:*:*:*
oracleenterprise_manager_for_oracle_database*cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:*:*:*:*:*:*:*:*

Social References

More

Related

cnvd 1
ibm 5
zdt 2
cvelist 1
prion 1
packetstorm 2
nessus 1
oracle 1
cnvd
cnvd
Oracle Database Server has an unspecified vulnerability (CNVD-2021-84599)
2021-10-20 00:00:00
ibm
ibm
Security Bulletin: IBM Emptoris Contract Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-19 05:55:56
Security Bulletin: IBM Emptoris Strategic Supply Management Platform is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-19 05:54:25
Security Bulletin: IBM Emptoris Supplier Lifecycle Management vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-20 05:11:13
zdt
zdt
Oracle Unified Audit Policy Bypass Vulnerability
2023-01-03 00:00:00
Oracle Database Vault Metadata Exposure Vulnerability
2023-01-05 00:00:00
cvelist
cvelist
CVE-2021-35576
2021-10-20 00:00:00
prion
prion
Buffer overflow
2021-10-20 11:16:00
packetstorm
packetstorm
Oracle Unified Audit Policy Bypass
2023-01-02 00:00:00
Oracle Database Vault Metadata Exposure
2023-01-05 00:00:00
nessus
nessus
Oracle Database Server Multiple Vulnerabilities (October 2021 CPU)
2021-10-21 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

2.5 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.029 Low

EPSS

Percentile

90.7%

JSON
Related for CVE-2021-35576
cnvd1ibm5zdt2cvelist1prion1packetstorm2nessus1oracle1