CVE-2021-2329 – Alert Detail – Security Database

ByPR 24

Executive Summary

This vulnerability is currently undergoing analysis and not all information is available. Please check back soon to view the completed vulnerability summary

Informations
Name CVE-2021-2329 First vendor Publication 2021-07-21
Vendor Cve Last vendor Modification 2021-07-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in takeover of Oracle XML DB. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2329

Sources (Detail)

Alert History

If you want to see full details history, please login or register.

0

Date Informations
2021-07-21 09:23:01

Similar Posts

DOJ Seizes 2 Domains Linked to USAID Phishing Campaign

DOJ Seizes 2 Domains Linked to USAID Phishing Campaign

ByPR 24

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management FBI and CISA Continue to Probe Campaign That Targeted Marketing Firm Scott Ferguson (Ferguson_Writes) • June 1, 2021     The Department of Justice announced Tuesday that it has seized two domains that were used during a recent phishing campaign that…

Malspam Campaign Used Hancitor to Download Cuba Ransomware

Malspam Campaign Used Hancitor to Download Cuba Ransomware

ByPR 24

Cybercrime , Cybercrime as-a-service , Email Security & Protection Attackers Co-Opted Malware for Data Exfiltration and Ransom, Group-IB Finds Akshaya Asokan (asokan_akshaya) • May 8, 2021     Attackers co-opted the Hancitor malware downloader and recently used it to deliver Cuba ransomware as part of an email spam campaign for data exfiltration and ransom extortion,…

Using a Medical Device Cybersecurity Bill of Materials

Using a Medical Device Cybersecurity Bill of Materials

ByPR 24

When medical device makers provide a software bill of materials for components contained in their products, it’s critical to make that voluminous security information actionable for healthcare customers, says Rob Suárez, CISO at medical device maker Becton Dickinson and Co., or BD. The Food and Drug Administration in draft guidance released in 2018 – which…

Beware of this malicious Android system update

Beware of this malicious Android system update

ByPR 24

Beware of this malicious Android system update | IT Security News 29. March 2021 Cybersecurity firm Zimperium has uncovered a latest mobile security threat as a critical system update that is actually a sophisticated malware that steals data and conduct espionage on targeted smart phones. Zimperium zLabs says that the malware has capability of sending…