Design/Logic Flaw

🗓️ 21 Jul 2021 15:15:00Reported by PRIOn knowledge baseType

Vulnerability in Advanced Networking Option component of Oracle Database Server version 12.1.0.2, 12.2.0.1, and 19c allows unauthenticated network access to compromise and potentially takeover the system. July 2021 update addresses CVE-2021-2351 with Native Network Encryption changes

Reporter	Title	Published	Views	Family All 57
0day.today	Oracle Database Weak NNE Integrity Key Derivation Vulnerability	13 Dec 202100:00	–	zdt
0day.today	Oracle Database Protection Mechanism Bypass Vulnerability	13 Dec 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Strategic Supply Management Platform (CVE-2021-2351)	22 Oct 202106:38	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Database Server Security Vulnerability Affects IBM Emptoris Sourcing (CVE-2021-2351)	22 Oct 202106:40	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Contract Management (CVE-2021-2351)	22 Oct 202106:36	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Supplier Lifecycle Mgmt (CVE-2021-2351)	22 Oct 202106:37	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Program Management (CVE-2021-2351)	22 Oct 202106:39	–	ibm
CNNVD	Oracle Database Server 授权问题漏洞	20 Jul 202100:00	–	cnnvd
CNVD	Oracle Database Server has an unspecified vulnerability (CNVD-2022-09810)	21 Jul 202100:00	–	cnvd
CVE	CVE-2021-2351	20 Jul 202122:43	–	cve

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
seclists	www.seclists.org/fulldisclosure/2021/Dec/19
seclists	www.seclists.org/fulldisclosure/2021/Dec/20
packetstormsecurity	www.packetstormsecurity.com/files/165258/Oracle-Database-Weak-NNE-Integrity-Key-Derivation.html
packetstormsecurity	www.packetstormsecurity.com/files/165255/Oracle-Database-Protection-Mechanism-Bypass.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpujan2023.html

16 Feb 2024 18:48Current

8.5High risk

Vulners AI Score8.5

EPSS0.03301