Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-35576
HistoryOct 20, 2021 - 11:16 a.m.

Buffer overflow

2021-10-2011:16:00
PRIOn knowledge base
www.prio-n.com
6

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

2.5 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.029 Low

EPSS

Percentile

90.5%

JSON

Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with network access via Oracle Net to compromise Oracle Database Enterprise Edition Unified Audit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database Enterprise Edition Unified Audit accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Related

ibm 5
zdt 2
cnvd 1
cvelist 1
cve 1
packetstorm 2
nessus 1
oracle 1
ibm
ibm
Security Bulletin: IBM Emptoris Contract Management is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-19 05:55:56
Security Bulletin: IBM Emptoris Strategic Supply Management Platform is vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-19 05:54:25
Security Bulletin: IBM Emptoris Supplier Lifecycle Management vulnerable to unspecified vulnerability due to Oracle Database Server (CVE-2021-35576)
2022-04-20 05:11:13
zdt
zdt
Oracle Unified Audit Policy Bypass Vulnerability
2023-01-03 00:00:00
Oracle Database Vault Metadata Exposure Vulnerability
2023-01-05 00:00:00
cnvd
cnvd
Oracle Database Server has an unspecified vulnerability (CNVD-2021-84599)
2021-10-20 00:00:00
cvelist
cvelist
CVE-2021-35576
2021-10-20 00:00:00
cve
cve
CVE-2021-35576
2021-10-20 11:16:00
packetstorm
packetstorm
Oracle Unified Audit Policy Bypass
2023-01-02 00:00:00
Oracle Database Vault Metadata Exposure
2023-01-05 00:00:00
nessus
nessus
Oracle Database Server Multiple Vulnerabilities (October 2021 CPU)
2021-10-21 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

2.5 Low

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.029 Low

EPSS

Percentile

90.5%

JSON
Related for PRION:CVE-2021-35576
ibm5zdt2cnvd1cvelist1cve1packetstorm2nessus1oracle1