CVE-2021-2437

CVE-2021-2437 affects Oracle MySQL Server (component: Server: Optimizer). The vulnerability is present in MySQL Server versions 8.0.25 and earlier. It is exploitable by a high-privilege attacker who has network access via multiple protocols, potentially leading to a hang or a frequently repeatabl...

CVE-2021-2434

CVE-2021-2434 affects Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator (component: Application Service). Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise the Oracle W...

CVE-2021-2434

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2433

Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase component: Web Services. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic...

CVE-2021-2433

CVE-2021-2433 affects Oracle’s Essbase Analytic Provider Services (Web Services) in Essbase. Affected versions are 11.1.2.4 and 21.2. An unauthenticated attacker with network access via HTTP can cause the service to hang or crash repeatedly (complete DOS). The CVSS 3.1 base score is 7.5 (Availabi...

CVE-2021-2427

Removed by vendor...

CVE-2021-2426

CVE-2021-2426 affects Oracle MySQL Server (component: Server: Optimizer). Affected: 8.0.25 and prior. Description from multiple sources: an attacker with network access via multiple protocols, possessing high privileges, can cause the MySQL Server to hang or crash (complete DOS) with a CVSS v3.1 ...

CVE-2021-2425

CVE-2021-2425 is a vulnerability in Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.25 and earlier. An attacker with network access and high privileges can cause the MySQL Server to hang or crash (denial of service). The connected documents confirm the affected component and th...

CVE-2021-2422

CVE-2021-2422 affects Oracle MySQL Server (component: Server: PS); affected versions are 8.0.25 and prior. The vulnerability enables a high-privileged attacker with network access via multiple protocols to cause a hang or crash (complete DOS) of MySQL Server (CVSS v3.1 base 4.9). Public advisorie...

CVE-2021-2418

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-2417

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: GIS. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2021-2415

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Timecard. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and...

CVE-2021-2415

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Timecard. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and...

CVE-2021-2412

Removed by vendor...

CVE-2021-2410

CVE-2021-2410 : A vulnerability in Oracle MySQL Server (component: Server: Optimizer) affects MySQL 8.0.25 and earlier. An attacker with network access via multiple protocols and high privileges can exploit it to cause a hang or frequent crash (DoS). Public advisories parallel to this CVE indicat...

CVE-2021-2409

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2407

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Portal. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-2407

CVE-2021-2407 affects Oracle PeopleSoft Enterprise PeopleTools Portal (versions 8.57, 8.58, 8.59). An unauthenticated attacker with network access over HTTP can read a subset of data exposed by PeopleTools. The issue is tied to the Portal component; no exploitation details are provided in the sou...

CVE-2021-2406

Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Collaborative...

CVE-2021-2406

CVE-2021-2406 affects Oracle E-Business Suite’s Oracle Collaborative Planning product, User Interface component. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Collaborative Planning, potentially enabling u...