CVE-2021-2054

Vulnerability in the RDBMS Sharding component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Any View, Create Any Trigger privilege with network access via Oracle Net to compromise RDBMS Sharding. Successful attacks of this vulnerability can result in takeover of RDBMS Sharding. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-083/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-083/Third Party Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20534IBM Security Verify Access Docker 10.0.0 could allow a remot…3.5
• CVE-2021-20535IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is…5.4
• CVE-2021-20536IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1…6.2
• CVE-2021-20537IBM Security Verify Access Docker 10.0.0 contains hard-coded…6.5
• CVE-2021-20538IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could …9.1
• CVE-2021-20539IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0,…5.3
• CVE-2021-20540IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0,…5.3
• CVE-2021-20541IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0,…5.3
• CVE-2021-20543IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 i…5.4
• CVE-2021-20544IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 i…4.3
• CVE-2021-20546IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vuln…5.5
• CVE-2021-20549IBM Content Navigator 3.0.CD is vulnerable to cross-site scr…5.4