CVE-2021-2025

The CVE-2021-2025 entry affects Oracle Fusion Middleware — Oracle BI Enterprise Edition (Analytics Web General). Affected versions: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise OBIEE; attacks require...

CVE-2021-2020

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-2025

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2021-2019

Removed by vendor...

CVE-2021-2026

CVE-2021-2026 affects Oracle E-Business Suite’s Marketing Administration. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an unauthenticated network vulnerability over HTTP that requires user interaction to exploit and can lead to unauthorized access/update of Oracle Marketing data....

CVE-2021-2022

CVE-2021-2022 is a vulnerability in Oracle MySQL Server (component: InnoDB) that affects MySQL Server versions 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The issue is exploitable by a highly privileged attacker who can access the affected server over network via multiple prot...

CVE-2021-2021

CVE-2021-2021 affects Oracle MySQL Server (MySQL: Server: Optimizer) with affected versions 8.0.22 and earlier. It is described as an easily exploitable vulnerability allowing a high-privilege attacker with network access via multiple protocols to cause a hang or complete DoS on MySQL Server. The...

CVE-2021-2019

CVE-2021-2019 concerns Oracle MySQL Server (Server: Security: Privileges). Affected versions: 8.0.19 and earlier. The vulnerability is exploitable by a highly privileged attacker who has network access via multiple protocols, enabling unauthorized read access to a subset of MySQL Server data. The...

CVE-2021-2018

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful...

CVE-2021-2013

The CVE-2021-2013 flaw affects Oracle BI Publisher (BI Publisher Security) within Oracle Fusion Middleware. Affects 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability permits unauthenticated or low-privilege attackers over HTTP to access or modify data and cause partial denial o...

CVE-2021-2011

Disclaimer: This data contains information about vulnerable...

CVE-2021-2014

CVE-2021-2014 is a vulnerability in Oracle MySQL Server (Server: PAM Auth Plugin) affecting 5.7.32 and earlier. An authenticated attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or crash) with an availability impact. The initial data lists a ...

CVE-2021-2015

CVE-2021-2015 affects Oracle E-Business Suite, specifically the Oracle Workflow component (Worklist). Affected versions are 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Workflow, with exploitation requiring user interaction...

CVE-2021-2009

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2021-2015

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks...

CVE-2021-2017

CVE-2021-2017 is a vulnerability in Oracle E-Business Suite’s Oracle User Management component (Proxy User Delegation). Affected are version 12.1.3 and 12.2.3–12.2.10. The issue allows a low-privileged, network-accessible attacker over HTTP to read a subset of data in Oracle User Management. CVSS...

CVE-2021-2016

Removed by vendor...

CVE-2021-2013

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2009

Removed by vendor...

CVE-2021-2002

CVE-2021-2002 affects the MySQL Server, specifically the replication server component. Affected are 8.0.22 and earlier. The vulnerability can be exploited by a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (DoS) of MySQL Serve...