CVE-2021-2477

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Framework. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

• https://www.oracle.com/security-alerts/cpuoct2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuoct2021.htmlVendor Advisory

Published

Oct 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24764The Perfect Survey WordPress plugin before 1.5.2 does not sa…6.1
• CVE-2021-24765The Perfect Survey WordPress plugin through 1.5.2 does not v…6.1
• CVE-2021-24766The 404 to 301 – Redirect, Log and Notify 404 Errors WordPre…6.5
• CVE-2021-24767The Redirect 404 Error Page to Homepage or Custom Page with …6.5
• CVE-2021-24768The WP RSS Aggregator WordPress plugin before 4.19.2 does no…4.8
• CVE-2021-24769The Permalink Manager Lite WordPress plugin before 2.2.13.1 …7.2
• CVE-2021-24770The Stylish Price List WordPress plugin before 6.9.1 does no…6.5
• CVE-2021-24771The Inspirational Quote Rotator WordPress plugin through 1.0…4.8
• CVE-2021-24772The Stream WordPress plugin before 3.8.2 does not sanitise a…8.8
• CVE-2021-24773The WordPress Download Manager WordPress plugin before 3.2.1…4.8
• CVE-2021-24774The Check & Log Email WordPress plugin before 1.0.3 does not…7.2
• CVE-2021-24775The Document Embedder WordPress plugin before 1.7.5 contains…5.3