CVE-2021-2393

Vulnerability in the Oracle E-Records product of Oracle E-Business Suite (component: E-signatures). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Records. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle E-Records accessible data as well as unauthorized access to critical data or complete access to all Oracle E-Records accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23924An issue was discovered in Devolutions Server before 2020.3.…7.5
• CVE-2021-23925An issue was discovered in Devolutions Server before 2020.3.…6.1
• CVE-2021-23926The XML parsers used by XMLBeans up to version 2.6.0 did not…9.1
• CVE-2021-23927OX App Suite through 7.10.4 allows SSRF via a URL with an @ …6.4
• CVE-2021-23928OX App Suite through 7.10.3 allows XSS via the ajax/apps/man…6.1
• CVE-2021-23929OX App Suite through 7.10.4 allows XSS via a crafted Content…6.1
• CVE-2021-23930OX App Suite through 7.10.4 allows XSS via use of the conver…6.1
• CVE-2021-23931OX App Suite through 7.10.4 allows XSS via an inline binary …6.1
• CVE-2021-23932OX App Suite through 7.10.4 allows XSS via an inline image w…6.1
• CVE-2021-23933OX App Suite through 7.10.4 allows XSS via JavaScript in a N…6.1
• CVE-2021-23934OX App Suite through 7.10.4 allows XSS via a contact whose n…6.1
• CVE-2021-23935OX App Suite through 7.10.4 allows XSS via an appointment in…6.1