CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Universal Work Queue accessible data as well as unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22454A component of the HarmonyOS has a External Control of Syste…5.5
• CVE-2021-22455A component of the HarmonyOS has a Integer Overflow or Wrapa…5.5
• CVE-2021-22456A component of the HarmonyOS has a Data Processing Errors vu…5.5
• CVE-2021-22457A component of the HarmonyOS has a Improper Input Validation…3.3
• CVE-2021-22458A component of the HarmonyOS has a Improper Restriction of O…7.8
• CVE-2021-22459A component of the HarmonyOS has a NULL Pointer Dereference …5.5
• CVE-2021-22460A component of the HarmonyOS has a Insufficient Verification…5.5
• CVE-2021-22461A component of the HarmonyOS has a Allocation of Resources W…5.5
• CVE-2021-22462A component of the HarmonyOS has a NULL Pointer Dereference …5.5
• CVE-2021-22463A component of the HarmonyOS has a Use After Free vulnerabil…5.5
• CVE-2021-22464A component of the HarmonyOS has a Out-of-bounds Read vulner…3.3
• CVE-2021-22465A component of the HarmonyOS has a Heap-based Buffer Overflo…5.5