CVE-2021-2231

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Installed Base accessible data as well as unauthorized access to critical data or complete access to all Oracle Installed Base accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Apr 22, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-223104.4There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, CVE-2021-223117.2There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can ru CVE-2021-223126.5There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending spe CVE-2021-223137.5There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiali CVE-2021-223147.8There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific ope CVE-2021-223166.8There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can CVE-2021-223177.5There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confide CVE-2021-223185.5A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause syste CVE-2021-223197.5There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows.CVE-2021-22321.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affecte CVE-2021-223207.5There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit CVE-2021-223215.3There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers c