CVE-2021-2256

4 documents4 sources
Severity
10.0CRITICAL
EPSS
2.2%
top 15.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Cloud InfrastructureOracle Storage Cloud Software Appliance
Timeline
PublishedApr 22
Latest updateMay 24

Description

Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Storage Cloud Software Appliance. While the vulnerability is in Oracle Storage Cloud Software Appliance, attacks may significantly impact additional products. Successful attacks of this vulnerab…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5oracle_corporation/cloud_infrastructureunspecified — 16.3.1.4.2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-chfm-q9vj-99fm: Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console)↗2022-05-24
▶
CVEList
CVE-2021-2256: Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console)↗2021-04-22
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Storage Gateway Risk Matrix: Management Console — CVE-2021-2256↗2021-04-15
▶