CVE-2021-2330
Last modified
CVE-2021-2330 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Vulnerability in the Core RDBMS component of Oracle Database Server. The supported version that is affected is 19c. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
Vulnerability in the Core RDBMS component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Core RDBMS. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Core Rdbms | 19c |
References
- https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
- https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-2330?
How severe is CVE-2021-2330?
How do I fix CVE-2021-2330?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-23284Eaton Intelligent Power Manager Infrastructure (IPM Infrastr…4.8
- CVE-2021-23285Eaton Intelligent Power Manager Infrastructure (IPM Infrastr…4.8
- CVE-2021-23286Eaton Intelligent Power Manager Infrastructure (IPM Infrastr…8
- CVE-2021-23287The vulnerability exists due to insufficient validation of i…5.4
- CVE-2021-23288The vulnerability exists due to insufficient validation of i…4.8
- CVE-2021-2329Vulnerability in the Oracle XML DB component of Oracle Datab…7.2
- CVE-2021-2332Vulnerability in the Oracle LogMiner component of Oracle Dat…6.7
- CVE-2021-23326This affects the package @graphql-tools/git-loader before 6.…8.8
- CVE-2021-23327The package apexcharts before 3.24.0 are vulnerable to Cross…6.3
- CVE-2021-23328This affects all versions of package iniparserjs. This vulne…5.6
- CVE-2021-23329The package nested-object-assign before 1.0.4 are vulnerable…7.5
- CVE-2021-2333Vulnerability in the Oracle XML DB component of Oracle Datab…4.9
Are you affected by CVE-2021-2330?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
