CVE-2021-35649

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Secure Global Desktop accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Secure Global Desktop. CVSS 3.1 Base Score 5.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L).

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-35655.9A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentiallCVE-2021-356504.6Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affectCVE-2021-356518.5Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-3565210.0Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356537.7Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356547.5Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356555.3Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affCVE-2021-356567.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356577.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356587.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-356597.5Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported versionCVE-2021-35665.5Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file t
CVE-2021-35649: Medium severity, CVSS 5.4 | Vulnix