CVE-2021-2004

Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20032SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug …9.8
• CVE-2021-20034An improper access control vulnerability in SMA100 allows a …9.1
• CVE-2021-20035Improper neutralization of special elements in the SMA100 ma…6.5
• CVE-2021-20037SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-…7.8
• CVE-2021-20038A Stack-based buffer overflow vulnerability in SMA100 Apache…9.8
• CVE-2021-20039Improper neutralization of special elements in the SMA100 ma…8.8
• CVE-2021-20040A relative path traversal vulnerability in the SMA100 upload…7.5
• CVE-2021-20041An unauthenticated and remote adversary can consume all of t…7.5
• CVE-2021-20042An unauthenticated remote attacker can use SMA 100 as an uni…9.8
• CVE-2021-20043A Heap-based buffer overflow vulnerability in SonicWall SMA1…8.8
• CVE-2021-20044A post-authentication remote command injection vulnerability…8.8
• CVE-2021-20045A buffer overflow vulnerability in SMA100 sonicfiles RAC_COP…9.8