CVE-2021-35554

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Trade Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpuoct2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuoct2021.htmlPatch, Vendor Advisory

Published

Oct 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35549Vulnerability in the Oracle Solaris product of Oracle System…3.9
• CVE-2021-3555A Buffer Overflow vulnerability in the RSTP server component…8.8
• CVE-2021-35550Vulnerability in the Java SE, Oracle GraalVM Enterprise Edit…5.9
• CVE-2021-35551Vulnerability in the RDBMS Security component of Oracle Data…5.5
• CVE-2021-35552Vulnerability in the Oracle WebLogic Server product of Oracl…5.3
• CVE-2021-35553Vulnerability in the PeopleSoft Enterprise CS Student Record…6.5
• CVE-2021-35556Vulnerability in the Java SE, Oracle GraalVM Enterprise Edit…5.3
• CVE-2021-35557Vulnerability in the Core RDBMS component of Oracle Database…4.3
• CVE-2021-35558Vulnerability in the Core RDBMS component of Oracle Database…4.3
• CVE-2021-35559Vulnerability in the Java SE, Oracle GraalVM Enterprise Edit…5.3
• CVE-2021-3556Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-35560Vulnerability in the Java SE product of Oracle Java SE (comp…7.5