CVE-2021-2436 — Oracle Common Applications vulnerability
4 documents4 sources
Severity
8.2HIGHNVD
EPSS
2.3%
top 15.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 21
Latest updateMay 24
Description
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may signi…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:NExploitability: 2.8 | Impact: 4.7
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-q7gg-rvc8-jm36: Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework)↗2022-05-24
CVEList▶
CVE-2021-2436: Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework)↗2021-07-20
📋Vendor Advisories
1Oracle▶
Oracle Oracle E-Business Suite Risk Matrix: CRM User Management Framework — CVE-2021-2436↗2021-07-15