CVE-2021-2003

Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20023SonicWall Email Security version 10.0.9.x contains a vulnera…4.9
• CVE-2021-20024Multiple Out-of-Bound read vulnerability in SonicWall Switch…8.1
• CVE-2021-20025SonicWall Email Security Virtual Appliance version 10.0.9 an…7.8
• CVE-2021-20026A vulnerability in the SonicWall NSM On-Prem product allows …8.8
• CVE-2021-20027A buffer overflow vulnerability in SonicOS allows a remote a…7.5
• CVE-2021-20028Improper neutralization of a SQL Command leading to SQL Inje…9.8
• CVE-2021-20030SonicWall GMS is vulnerable to file path manipulation result…7.5
• CVE-2021-20031A Host Header Redirection vulnerability in SonicOS potential…6.1
• CVE-2021-20032SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug …9.8
• CVE-2021-20034An improper access control vulnerability in SMA100 allows a …9.1
• CVE-2021-20035Improper neutralization of special elements in the SMA100 ma…6.5
• CVE-2021-20037SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-…7.8