CVE-2021-2175

🗓️ 22 Apr 2021 00:00:00Reported by oracleType

vulnrichment🔗 github.com👁 2 Views

CVE-2021-2175: Oracle Database Vault allows read access by attackers with view privileges via Oracle Net.

Reporter	Title	Published	Views	Family All 24
zdt	Oracle Database Vault Metadata Exposure Vulnerability	5 Jan 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Management	22 Jul 202110:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Program Management	22 Jul 202110:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Sourcing	22 Jul 202110:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Contract Management	22 Jul 202110:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform	22 Jul 202110:30	–	ibm
ATTACKERKB	CVE-2021-2175	22 Apr 202122:15	–	attackerkb
BDU FSTEC	The vulnerability of the Database Vault component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.	12 May 202100:00	–	bdu_fstec
Circl	CVE-2021-2175	2 Feb 202216:57	–	circl
CNNVD	Oracle Database Server 输入验证错误漏洞	20 Apr 202100:00	–	cnnvd

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/170373/Oracle-Database-Vault-Metadata-Exposure.html
databasesecurityninja	www.databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/
oracle	www.oracle.com/security-alerts/cpuapr2021.html

05 Jan 2023 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.12.7

EPSS0.01654

SSVC

oracle database vault view privileges network access high privileged attacker