CVE-2021-2053

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

• https://blog.stmcyber.com/vulns/cve-2021-2053/Exploit, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://blog.stmcyber.com/vulns/cve-2021-2053/Exploit, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20523IBM Security Verify Access Docker 10.0.0 could allow a remot…2.7
• CVE-2021-20524IBM Security Verify Access Docker 10.0.0 is vulnerable to cr…4.8
• CVE-2021-20526IBM Planning Analytics 2.0 could allow a remote attacker to …5.3
• CVE-2021-20527IBM Resilient SOAR V38.0 could allow a privileged user to cr…7.2
• CVE-2021-20528IBM Control Center 6.2.0.0 is vulnerable to cross-site scrip…5.4
• CVE-2021-20529IBM Control Center 6.2.0.0 could allow a user to obtain sens…5.3
• CVE-2021-20532IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could a…7.8
• CVE-2021-20533IBM Security Verify Access Docker 10.0.0 could allow a remot…7.2
• CVE-2021-20534IBM Security Verify Access Docker 10.0.0 could allow a remot…3.5
• CVE-2021-20535IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is…5.4
• CVE-2021-20536IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1…6.2
• CVE-2021-20537IBM Security Verify Access Docker 10.0.0 contains hard-coded…6.5