CVE-2021-2039

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20379IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses …7.5
• CVE-2021-2038Vulnerability in the MySQL Server product of Oracle MySQL (c…4.4
• CVE-2021-20380IBM QRadar Advisor With Watson App 1.1 through 2.5 as used o…7.5
• CVE-2021-20385IBM Security Guardium 11.2 could allow a remote authenticate…7.2
• CVE-2021-20386IBM Security Guardium 11.2 is vulnerable to cross-site scrip…6.1
• CVE-2021-20389IBM Security Guardium 11.2 stores user credentials in plain …7.8
• CVE-2021-20391IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allow…3.3
• CVE-2021-20392IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vu…6.1
• CVE-2021-20393IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could…7.5
• CVE-2021-20396IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM Q…3.3
• CVE-2021-20397IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scri…6.1
• CVE-2021-20399IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA…9.1