Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-2018
HistoryJan 20, 2021 - 3:15 p.m.

CVE-2021-2018

2021-01-2015:15:46
[email protected]
web.nvd.nist.gov
9
oracle database server
advanced networking option
vulnerability
windows platform
network access
unauthenticated attacker
cvss 3.1

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: CVE-2021-2018 affects Windows platform only. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

Affected configurations

Nvd
Node
oracleadvanced_networking_optionMatch18c
OR
oracleadvanced_networking_optionMatch19c
AND
microsoftwindowsMatch-
Node
oracleadaptive_access_managerMatch11.1.2.3.0
OR
oracledata_integratorMatch11.1.1.9.0
OR
oracledata_integratorMatch12.2.1.3.0
OR
oracledata_integratorMatch12.2.1.4.0
OR
oracleenterprise_manager_for_fusion_applicationsMatch13.3.0.0
OR
oraclehospitality_simphonyMatch18.2.7.2
OR
oraclehospitality_simphonyMatch19.1.3
OR
oracleweblogic_serverMatch12.2.1.3.0
VendorProductVersionCPE
oracleadvanced_networking_option18ccpe:2.3:a:oracle:advanced_networking_option:18c:*:*:*:*:*:*:.
oracleadvanced_networking_option19ccpe:2.3:a:oracle:advanced_networking_option:19c:*:*:*:*:*:*:.
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
oracleadaptive_access_manager11.1.2.3.0cpe:2.3:a:oracle:adaptive_access_manager:11.1.2.3.0:*:*:*:*:*:*:*
oracledata_integrator11.1.1.9.0cpe:2.3:a:oracle:data_integrator:11.1.1.9.0:*:*:*:*:*:*:*
oracledata_integrator12.2.1.3.0cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*
oracledata_integrator12.2.1.4.0cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*
oracleenterprise_manager_for_fusion_applications13.3.0.0cpe:2.3:a:oracle:enterprise_manager_for_fusion_applications:13.3.0.0:*:*:*:*:*:*:*
oraclehospitality_simphony18.2.7.2cpe:2.3:a:oracle:hospitality_simphony:18.2.7.2:*:*:*:*:*:*:*
oraclehospitality_simphony19.1.3cpe:2.3:a:oracle:hospitality_simphony:19.1.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

Related

prion 1
vulnrichment 1
cve 1
cvelist 1
ibm 5
nessus 1
oracle 1
prion
prion
Design/Logic Flaw
2021-01-20 15:15:00
vulnrichment
vulnrichment
CVE-2021-2018
2021-01-20 14:50:02
cve
cve
CVE-2021-2018
2021-01-20 15:15:46
cvelist
cvelist
CVE-2021-2018
2021-01-20 14:50:02
ibm
ibm
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management
2021-04-07 10:01:43
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform
2021-04-07 10:02:56
Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Sourcing
2021-04-07 10:07:14
nessus
nessus
Oracle Database Server Multiple Vulnerabilities (Jan 2021 CPU)
2021-01-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON
Related for NVD:CVE-2021-2018
prion1vulnrichment1cve1cvelist1ibm5nessus1oracle1