CVE-2021-2329 – Alert Detail – Security Database

ByPR 24

Executive Summary

This vulnerability is currently undergoing analysis and not all information is available. Please check back soon to view the completed vulnerability summary

Informations
Name CVE-2021-2329 First vendor Publication 2021-07-21
Vendor Cve Last vendor Modification 2021-07-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in takeover of Oracle XML DB. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2329

Sources (Detail)

Alert History

If you want to see full details history, please login or register.

0

Date Informations
2021-07-21 09:23:01

Similar Posts

Hackers Target Critical Infrastructure in Southeast Asia

Hackers Target Critical Infrastructure in Southeast Asia

ByPR 24

Critical Infrastructure Security , Cybercrime , Cybercrime as-a-service Symantec: China-Linked Actors Investigate SCADA Systems Akshaya Asokan (asokan_akshaya) • August 7, 2021     An unidentified hacking group with suspected China ties is targeting critical infrastructure in South East Asia as part of a cyberespionage campaign to exfiltrate information about the victim’s SCADA systems. says a…

‘Panda Stealer’ Targets Cryptocurrency Wallets

‘Panda Stealer’ Targets Cryptocurrency Wallets

ByPR 24

Cryptocurrency Fraud , Cybercrime , Fraud Management & Cybercrime Malware Spread Through Spam Email Campaign Prajeet Nair (@prajeetspeaks) • May 7, 2021     Researchers at Trend Micro have uncovered a new cryptocurrency stealer variant that uses a fileless approach in its global spam email distribution campaign to evade detection. See Also: Live Webinar |…

Iranian Hacking Group Dubbed As Agrius Is Targeting Israel

Iranian Hacking Group Dubbed As Agrius Is Targeting Israel

ByPR 24

A new threat actor dubbed Agrius was observed by the researchers at SentinelOne operating in Israel in 2020. It looks like the attackers behind Agrius have shifted towards the use of extortion of their targets, claiming they stole and encrypted their data. The analysis of what seemed to be a classic ransomware attack revealed new…

Russian ambassador returns ‘optimistic’ to Washington

Russian ambassador returns ‘optimistic’ to Washington

ByPR 24

The Russian ambassador in Washington flew back Sunday to the United States saying he hoped to build “equal and pragmatic” ties after a US-Russia summit in Geneva aimed at reducing tensions. The plane transporting ambassador Anatoly Antonov, who was recalled in March for consultations, took off at 9:20 a.m. (0620 GMT) from Moscow’s Sheremetyevo airport…

Attacks Targeting Accellion Product Linked to FIN11 Cybercrime Group

Attacks Targeting Accellion Product Linked to FIN11 Cybercrime Group

ByPR 24

The hacking group behind the recent cyber-attack targeting Accellion’s FTA file transfer service appears to be linked to a threat actor known as FIN11, security researchers with FireEye’s Mandiant division reveal. The attacks on FTA, a soon-to-be-retired service, started in mid-December 2020 and resulted in the compromise of data pertaining to multiple Accellion customers. As…