CVE-2021-2338

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing Stand-Alone). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel Apps - Marketing accessible data as well as unauthorized read access to a subset of Siebel Apps - Marketing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujul2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlPatch, Vendor Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23374This affects all versions of package ps-visitor. If attacker…9.8
• CVE-2021-23375This affects all versions of package psnode. If attacker-con…9.8
• CVE-2021-23376This affects all versions of package ffmpegdotjs. If attacke…9.8
• CVE-2021-23377This affects all versions of package onion-oled-js. If attac…9.8
• CVE-2021-23378This affects all versions of package picotts. If attacker-co…9.8
• CVE-2021-23379This affects all versions of package portkiller. If (attacke…9.8
• CVE-2021-23380This affects all versions of package roar-pidusage. If attac…7.3
• CVE-2021-23381This affects all versions of package killing. If attacker-co…9.8
• CVE-2021-23382The package postcss before 8.2.13 are vulnerable to Regular …7.5
• CVE-2021-23383The package handlebars before 4.7.7 are vulnerable to Protot…9.8
• CVE-2021-23384The package koa-remove-trailing-slashes before 2.0.2 are vul…5.4
• CVE-2021-23385This affects all versions of package Flask-Security. When us…6.1