CVE-2021-2153

5 documents5 sources
Severity
4.3MEDIUM
EPSS
0.7%
top 27.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 22
Latest updateMay 24

Description

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Internet Expenses. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Ora

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

NVDoracle/internet_expenses12.2.312.2.10
CVEListV5oracle_corporation/internet_expenses12.2.3-12.2.10

Patches

🔴Vulnerability Details

2
GHSA
GHSA-g6px-r7wr-4fmv: Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses)2022-05-24
CVEList
CVE-2021-2153: Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses)2021-04-22

💥Exploits & PoCs

1
Nuclei
WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting

📋Vendor Advisories

1
Oracle
Oracle Oracle E-Business Suite Risk Matrix: Mobile Expenses — CVE-2021-21532021-04-15
CVE-2021-2153 (MEDIUM CVSS 4.3) | Vulnerability in the Oracle Interne | cvebase.io