6.5

CVE-2021-2054

EPSS 1.67%
Veröffentlicht 20.01.2021 15:15:48
Zuletzt bearbeitet 21.11.2024 06:02:16
Erkennungen
Login

Vulnerability in the RDBMS Sharding component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Any View, Create Any Trigger privilege with network access via Oracle Net to compromise RDBMS Sharding. Successful attacks of this vulnerability can result in takeover of RDBMS Sharding. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Rdbms Sharding Version 12.2.0.1

Oracle ≫ Rdbms Sharding Version 18c

Oracle ≫ Rdbms Sharding Version 19c

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.67%	0.738

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
Oracle	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://www.oracle.com/security-alerts/cpujan2021.html

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-21-083/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-2054

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-2054

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-2054

EUVD