CVE-2021-2190

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Sales Offline. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21894A directory traversal vulnerability exists in the Web Manage…9.1
• CVE-2021-21895A directory traversal vulnerability exists in the Web Manage…7.2
• CVE-2021-21896A directory traversal vulnerability exists in the Web Manage…6.5
• CVE-2021-21897A code execution vulnerability exists in the DL_Dxf::handleL…8.8
• CVE-2021-21898A code execution vulnerability exists in the dwgCompressor::…8.8
• CVE-2021-21899A code execution vulnerability exists in the dwgCompressor::…8.8
• CVE-2021-21900A code execution vulnerability exists in the dxfRW::processL…8.8
• CVE-2021-21901A stack-based buffer overflow vulnerability exists in the CM…8.8
• CVE-2021-21902An authentication bypass vulnerability exists in the CMA run…8.1
• CVE-2021-21903A stack-based buffer overflow vulnerability exists in the CM…9.8
• CVE-2021-21904A directory traversal vulnerability exists in the CMA CLI se…7.2
• CVE-2021-21905Stack-based buffer overflow vulnerability exists in how the …7.2