Vulnerability Details : CVE-2021-2351
Potential exploit
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Products affected by CVE-2021-2351
- cpe:2.3:a:oracle:clinical:5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:clinical:5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:timesten_in-memory_database:21.1.1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_safety:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_safety:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_safety:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:ilearning:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:ilearning:6.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:commerce_platform:11.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:commerce_platform:11.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:documaker:12.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:documaker:12.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_rules_palette:11.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_rules_palette:11.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_rules_palette:11.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_rules_palette:11.3.0:*:*:*:*:*:*:*
- Oracle » Primavera P6 Enterprise Project Portfolio ManagementVersions from including (>=) 18.8.0.0 and up to, including, (<=) 18.8.24cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Enterprise Project Portfolio ManagementVersions from including (>=) 17.12.0.0 and up to, including, (<=) 17.12.20cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Enterprise Project Portfolio ManagementVersions from including (>=) 20.12.0.0 and up to, including, (<=) 20.12.9.0cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Enterprise Project Portfolio ManagementVersions from including (>=) 19.12.0.0 and up to, including, (<=) 19.12.17.0cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:health_sciences_information_manager:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:health_sciences_information_manager:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_store_inventory_management:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_store_inventory_management:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_store_inventory_management:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_inventory_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_suite8:8.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_suite8:8.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*
- Oracle » Financial Services Analytical Applications InfrastructureVersions from including (>=) 8.0.7 and up to, including, (<=) 8.1.1cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*
- Oracle » Demantra Demand ManagementVersions from including (>=) 12.2.6 and up to, including, (<=) 12.2.11cpe:2.3:a:oracle:demantra_demand_management:*:*:*:*:*:*:*:*
- Oracle » Retail Customer InsightsVersions from including (>=) 16.0 and up to, including, (<=) 16.0.2cpe:2.3:a:oracle:retail_customer_insights:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_application_session_controller:3.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:goldengate_application_adapters:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_policy_administration:11.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8:*:*:*:*:*:*:*
- Oracle » Healthcare FoundationVersions from including (>=) 7.3.0 and up to, including, (<=) 7.3.0.2cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:*
- Oracle » Insurance Insbridge Rating And UnderwritingVersions from including (>=) 5.4 and up to, including, (<=) 5.6.0cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:*
- Oracle » Primavera P6 Professional Project ManagementVersions from including (>=) 19.12.0.0 and up to, including, (<=) 19.12.17.0cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Professional Project ManagementVersions from including (>=) 17.12 and up to, including, (<=) 17.12.20.0cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Professional Project ManagementVersions from including (>=) 18.8 and up to, including, (<=) 18.8.24.0cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*
- Oracle » Primavera P6 Professional Project ManagementVersions from including (>=) 20.12.0.0 and up to, including, (<=) 20.12.9.0cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
- Oracle » Utilities FrameworkVersions from including (>=) 4.3.0.1.0 and up to, including, (<=) 4.3.0.6.0cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:rapid_planning:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_design_studio:7.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:*
- Oracle » Communications Session Report ManagerVersions from including (>=) 8.0.0 and up to, including, (<=) 8.2.5.0cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*
- Oracle » Communications Session Route ManagerVersions from including (>=) 8.2.0 and up to, including, (<=) 8.2.5cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*
- Oracle » Banking Digital ExperienceVersions from including (>=) 18.1 and up to, including, (<=) 18.3cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_digital_experience:17.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_calendar_server:8.0.0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_contacts_server:8.0.0.3.0:*:*:*:*:*:*:*
- Oracle » Communications Network Charging And ControlVersions from including (>=) 12.0.1.0 and up to, including, (<=) 12.0.4.0.0cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:advanced_networking_option:12.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:advanced_networking_option:12.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:advanced_networking_option:19c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_data_repository:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:application_performance_management:13.4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:application_performance_management:13.5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hospitality_opera_5:5.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_price_management:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_price_management:16.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_price_management:14.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_data_gateway:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_data_gateway:11.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_data_gateway:11.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_data_gateway:11.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:insurance_data_gateway:11.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:spatial_studio:*:*:*:*:*:*:*:*
- Oracle » Communications Convergent Charging ControllerVersions from including (>=) 12.0.1.0.0 and up to, including, (<=) 12.0.4.0.0cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.11:*:*:*:*:*:*:*
- Oracle » Financial Services Model Management And GovernanceVersions from including (>=) 8.0.8.0.0 and up to, including, (<=) 8.1.1.0.0cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_apis:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_apis:19.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_apis:19.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:airlines_data_model:12.1.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:airlines_data_model:12.2.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_analytics:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_analytics:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_analytics:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_insight:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_insight:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_insight:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_data_model:11.3.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_data_model:11.3.2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_data_model:11.3.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_data_model:12.1.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_data_model:12.1.2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.7:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.8:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:health_sciences_clinical_development_analytics:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:health_sciences_inform_crf_submit:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_analytics:18.8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_analytics:19.12.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_analytics:20.12.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_data_warehouse:18.8.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_data_warehouse:19.12.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:primavera_data_warehouse:20.12.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:retail_analytics:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:thesaurus_management_system:5.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:thesaurus_management_system:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:thesaurus_management_system:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:zfs_storage_application_integration_engineering_software:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_mart:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_mart:8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:argus_mart:8.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1:*:*:*:*:*:*:*
- Oracle » Communications Diameter Intelligence HubVersions from including (>=) 8.0.0 and up to, including, (<=) 8.2.3cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:storagetek_tape_analytics:2.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-2351
2.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-2351
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
NIST | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.6
|
5.9
|
NIST | |
|
8.3
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
1.6
|
6.0
|
Oracle |
CWE ids for CVE-2021-2351
-
The product uses a broken or risky cryptographic algorithm or protocol.Assigned by: nvd@nist.gov (Primary)
-
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-2351
-
http://seclists.org/fulldisclosure/2021/Dec/20
Full Disclosure: [SYSS-2021-062] Oracle Database - Weak NNE Integrity Key DerivationExploit;Mailing List;Third Party Advisory
-
https://www.oracle.com/security-alerts/cpuapr2022.html
Oracle Critical Patch Update Advisory - April 2022Patch;Vendor Advisory
-
https://www.oracle.com/security-alerts/cpujan2022.html
Oracle Critical Patch Update Advisory - January 2022Patch;Vendor Advisory
-
https://www.oracle.com/security-alerts/cpujan2023.html
Oracle Critical Patch Update Advisory - January 2023Vendor Advisory
-
http://packetstormsecurity.com/files/165258/Oracle-Database-Weak-NNE-Integrity-Key-Derivation.html
Oracle Database Weak NNE Integrity Key Derivation ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://www.oracle.com/security-alerts/cpuoct2021.html
Oracle Critical Patch Update Advisory - October 2021Patch;Vendor Advisory
-
https://www.oracle.com/security-alerts/cpujul2021.html
Oracle Critical Patch Update Advisory - July 2021Patch;Vendor Advisory
-
http://packetstormsecurity.com/files/165255/Oracle-Database-Protection-Mechanism-Bypass.html
Oracle Database Protection Mechanism Bypass ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
http://seclists.org/fulldisclosure/2021/Dec/19
Full Disclosure: [SYSS-2021-061] Oracle Database - NNE Connection HijackingExploit;Mailing List;Third Party Advisory
-
https://www.oracle.com/security-alerts/cpujul2022.html
Oracle Critical Patch Update Advisory - July 2022Vendor Advisory
Jump to