CVE-2021-2137

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpuoct2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuoct2021.htmlVendor Advisory

Published

Oct 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21364swagger-codegen is an open-source project which contains a t…5.5
• CVE-2021-21365Bootstrap Package is a theme for TYPO3. It has been discover…5.4
• CVE-2021-21366xmldom is a pure JavaScript W3C standard-based (XML DOM Leve…4.3
• CVE-2021-21367Switchboard Bluetooth Plug for elementary OS from version 2.…8.1
• CVE-2021-21368msgpack5 is a msgpack v5 implementation for node.js and the …8.8
• CVE-2021-21369Hyperledger Besu is an open-source, MainNet compatible, Ethe…6.5
• CVE-2021-21370TYPO3 is an open source PHP based web content management sys…5.4
• CVE-2021-21371Tenable for Jira Cloud is an open source project designed to…8.6
• CVE-2021-21372Nimble is a package manager for the Nim programming language…8.8
• CVE-2021-21373Nimble is a package manager for the Nim programming language…5.9
• CVE-2021-21374Nimble is a package manager for the Nim programming language…8.1
• CVE-2021-21375PJSIP is a free and open source multimedia communication lib…6.5