CVE-2021-2457 : Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). Th

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Published 2021-07-21 00:15:15

Updated 2021-07-21 14:46:28

Source Oracle

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-2457

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 37 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-2457

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	Oracle
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

Products affected by CVE-2021-2457

Oracle » Identity Manager » Version: 11.1.2.3.0
cpe:2.3:a:oracle:identity_manager:11.1.2.3.0:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2021-2457

Exploit prediction scoring system (EPSS) score for CVE-2021-2457

CVSS scores for CVE-2021-2457

References for CVE-2021-2457

Products affected by CVE-2021-2457