CVE-2021-2344

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-234409.8This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when CVE-2021-234429.8This affects all versions of package @cookiex/deep. The global proto object can be polluted using the __proto__ object.CVE-2021-234436.1This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be CVE-2021-234449.8This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided CVE-2021-234456.1This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its cont CVE-2021-234467.5The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Ser CVE-2021-234476.1This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content CVE-2021-234489.8All versions of package config-handler are vulnerable to Prototype Pollution when loading config files.CVE-2021-2344910.0This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host CVE-2021-23455.4Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Tools and Fra CVE-2021-234509.8All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.CVE-2021-234519.8The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which