CVE-2021-2257

Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Storage Cloud Software Appliance. While the vulnerability is in Oracle Storage Cloud Software Appliance, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Storage Cloud Software Appliance accessible data. Note: Updating the Oracle Storage Cloud Software Appliance to version 16.3.1.4.2 or later will address these vulnerabilities. Download the latest version of Oracle Storage Cloud Software Appliance from <a href=" https://www.oracle.com/downloads/cloud/oscsa-downloads.html">here. Refer to Document <a href="https://support.oracle.com/rstype=doc&id=2768897.1">2768897.1 for more details. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22564For certain valid JPEG XL images with a size slightly larger…5.5
• CVE-2021-22565An attacker could prematurely expire a verification code, ma…6.5
• CVE-2021-22566An incorrect setting of UXN bits within mmu_flags_to_s1_pte_…9.8
• CVE-2021-22567Bidirectional Unicode text can be interpreted and compiled d…3.5
• CVE-2021-22568When using the dart pub publish command to publish a package…8.8
• CVE-2021-22569An issue in protobuf-java allowed the interleaving of com.go…5.5
• CVE-2021-22570Nullptr dereference when a null char is present in a proto s…5.5
• CVE-2021-22571A local attacker could read files from some other users' SA3…5.5
• CVE-2021-22572On unix-like systems, the system temporary directory is shar…5.5
• CVE-2021-22573The vulnerability is that IDToken verifier does not verify i…7.3
• CVE-2021-2258Vulnerability in the Oracle Projects product of Oracle E-Bus…8.1
• CVE-2021-2259Vulnerability in the Oracle Payables product of Oracle E-Bus…8.1