CVE-2021-2131

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N).

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 20, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-213105.9NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a tok CVE-2021-213117.2Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side re CVE-2021-213124.8GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213136.1GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213144.8GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213157.8The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed CVE-2021-213167.8less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing the CVE-2021-213175.3uap-core in an open-source npm package which contains the core of BrowserScope's original user agent string parser. In uap-core before versi CVE-2021-213185.4Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 th CVE-2021-213195.4Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript CVE-2021-213204.3matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content s CVE-2021-2132110.0fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from