CVE-2021-2248

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected software

VendorProductVersions
Oracle CorporationSecure Global Desktop5.6

References

Timeline

Published
Apr 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-224809.8The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead toCVE-2021-224817.5There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentCVE-2021-224825.3There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission oCVE-2021-224837.5There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS.CVE-2021-224847.5Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnCVE-2021-224857.5There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect servCVE-2021-224867.5There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidCVE-2021-224877.5There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availabiCVE-2021-224887.5There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft linkCVE-2021-224897.5There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.CVE-2021-22498.1Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Supported versions thCVE-2021-224905.3There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device pe
CVE-2021-2248: Critical severity, CVSS 10.0 | Vulnix