CVE-2021-2192

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris as well as unauthorized update, insert or delete access to some of Oracle Solaris accessible data. Note: This vulnerability applies to Oracle Solaris on SPARC systems only. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).

• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21914A heap-based buffer overflow vulnerability exists in the Dec…8.8
• CVE-2021-21915An exploitable SQL injection vulnerability exist in the ‘gro…8.8
• CVE-2021-21916An exploitable SQL injection vulnerability exist in the ‘gro…8.8
• CVE-2021-21917An exploitable SQL injection vulnerability exist in the ‘gro…8.8
• CVE-2021-21918A specially-crafted HTTP request can lead to SQL injection. …4.9
• CVE-2021-21919A specially-crafted HTTP request can lead to SQL injection. …4.9
• CVE-2021-21920A specially-crafted HTTP request can lead to SQL injection. …4.9
• CVE-2021-21921A specially-crafted HTTP request can lead to SQL injection. …4.9
• CVE-2021-21922A specially-crafted HTTP request can lead to SQL injection. …6.5
• CVE-2021-21923A specially-crafted HTTP request can lead to SQL injection. …4.9
• CVE-2021-21924A specially-crafted HTTP request can lead to SQL injection. …6.5
• CVE-2021-21925A specially-crafted HTTP request can lead to SQL injection. …6.5