CVE-2021-2326

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Database Vault accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23244ColorOS pregrant dangerous permissions to apps which are lis…7.8
• CVE-2021-23246In ACE2 ColorOS11, the attacker can obtain the foreground pa…7.5
• CVE-2021-23247A command injection vulerability found in quick game engine …9.8
• CVE-2021-23253Opera Mini for Android below 53.1 displays URL left-aligned …5.3
• CVE-2021-23258Authenticated users with Administrator or Developer roles ma…7.2
• CVE-2021-23259Authenticated users with Administrator or Developer roles ma…7.2
• CVE-2021-23260Authenticated users with Site roles may inject XSS scripts v…5.4
• CVE-2021-23261Authenticated administrators may override the system configu…4.9
• CVE-2021-23262Authenticated administrators may modify the main YAML config…7.2
• CVE-2021-23263Unauthenticated remote attackers can read textual content vi…7.5
• CVE-2021-23264Installations, where crafter-search is not protected, allow …9.1
• CVE-2021-23265A logged-in and authenticated user with a Reviewer Role may …4.3