Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

Published

2021-07-21T15:15:21.827

Last Modified

2024-11-21T06:02:56.483

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.3 (HIGH)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

4.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-327
    CWE-384
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle advanced_networking_option 12.1.0.2 Yes
Application oracle advanced_networking_option 12.2.0.1 Yes
Application oracle advanced_networking_option 19c Yes
Application oracle agile_engineering_data_management 6.2.1.0 Yes
Application oracle agile_plm 9.3.6 Yes
Application oracle agile_product_lifecycle_management_for_process 6.2.2.0 Yes
Application oracle agile_product_lifecycle_management_for_process 6.2.3.0 Yes
Application oracle airlines_data_model 12.1.1.0.0 Yes
Application oracle airlines_data_model 12.2.0.1.0 Yes
Application oracle application_performance_management 13.4.1.0 Yes
Application oracle application_performance_management 13.5.1.0 Yes
Application oracle application_testing_suite 13.3.0.1 Yes
Application oracle argus_analytics 8.2.1 Yes
Application oracle argus_analytics 8.2.2 Yes
Application oracle argus_analytics 8.2.3 Yes
Application oracle argus_insight 8.2.1 Yes
Application oracle argus_insight 8.2.2 Yes
Application oracle argus_insight 8.2.3 Yes
Application oracle argus_mart 8.2.1 Yes
Application oracle argus_mart 8.2.2 Yes
Application oracle argus_mart 8.2.3 Yes
Application oracle argus_safety 8.2.1 Yes
Application oracle argus_safety 8.2.2 Yes
Application oracle argus_safety 8.2.3 Yes
Application oracle banking_apis ≤ 18.3 Yes
Application oracle banking_apis 19.1 Yes
Application oracle banking_apis 19.2 Yes
Application oracle banking_apis 20.1 Yes
Application oracle banking_apis 21.1 Yes
Application oracle banking_digital_experience ≤ 18.3 Yes
Application oracle banking_digital_experience 17.2 Yes
Application oracle banking_digital_experience 19.1 Yes
Application oracle banking_digital_experience 19.2 Yes
Application oracle banking_digital_experience 20.1 Yes
Application oracle banking_digital_experience 21.1 Yes
Application oracle banking_enterprise_default_management 2.10.0 Yes
Application oracle banking_enterprise_default_management 2.12.0 Yes
Application oracle banking_platform 2.6.2 Yes
Application oracle banking_platform 2.7.1 Yes
Application oracle banking_platform 2.12.0 Yes
Application oracle big_data_spatial_and_graph < 23.1 Yes
Application oracle blockchain_platform 21.1.2 Yes
Application oracle clinical 5.2.1 Yes
Application oracle clinical 5.2.2 Yes
Application oracle commerce_platform 11.3.0 Yes
Application oracle commerce_platform 11.3.1 Yes
Application oracle commerce_platform 11.3.2 Yes
Application oracle communications_application_session_controller 3.9.0 Yes
Application oracle communications_billing_and_revenue_management 12.0.0.4 Yes
Application oracle communications_billing_and_revenue_management 12.0.0.5 Yes
Application oracle communications_calendar_server 8.0.0.5.0 Yes
Application oracle communications_contacts_server 8.0.0.3.0 Yes
Application oracle communications_convergent_charging_controller ≤ 12.0.4.0.0 Yes
Application oracle communications_convergent_charging_controller 6.0.1.0.0 Yes
Application oracle communications_data_model 11.3.2.1.0 Yes
Application oracle communications_data_model 11.3.2.2.0 Yes
Application oracle communications_data_model 11.3.2.3.0 Yes
Application oracle communications_data_model 12.1.0.1.0 Yes
Application oracle communications_data_model 12.1.2.0.0 Yes
Application oracle communications_design_studio 7.3.5 Yes
Application oracle communications_design_studio 7.4.0 Yes
Application oracle communications_design_studio 7.4.1 Yes
Application oracle communications_design_studio 7.4.2 Yes
Application oracle communications_diameter_intelligence_hub ≤ 8.2.3 Yes
Application oracle communications_ip_service_activator 7.4.0 Yes
Application oracle communications_metasolv_solution 6.3.1 Yes
Application oracle communications_network_charging_and_control ≤ 12.0.4.0.0 Yes
Application oracle communications_network_charging_and_control 6.0.1.0.0 Yes
Application oracle communications_network_integrity 7.3.5 Yes
Application oracle communications_network_integrity 7.3.6 Yes
Application oracle communications_pricing_design_center 12.0.0.4 Yes
Application oracle communications_pricing_design_center 12.0.0.5 Yes
Application oracle communications_services_gatekeeper 7.0 Yes
Application oracle communications_session_report_manager ≤ 8.2.5.0 Yes
Application oracle communications_session_route_manager ≤ 8.2.5 Yes
Application oracle data_integrator 12.2.1.3.0 Yes
Application oracle data_integrator 12.2.1.4.0 Yes
Application oracle demantra_demand_management ≤ 12.2.11 Yes
Application oracle documaker ≤ 12.6.4 Yes
Application oracle documaker 12.6.0 Yes
Application oracle documaker 12.7.0 Yes
Application oracle enterprise_data_quality 12.2.1.3.0 Yes
Application oracle enterprise_data_quality 12.2.1.4.0 Yes
Application oracle enterprise_manager_base_platform 13.4.0.0 Yes
Application oracle enterprise_manager_base_platform 13.5.0.0 Yes
Application oracle enterprise_manager_ops_center 12.4.0.0 Yes
Application oracle financial_services_analytical_applications_infrastructure ≤ 8.1.1 Yes
Application oracle financial_services_behavior_detection_platform 8.0.7 Yes
Application oracle financial_services_behavior_detection_platform 8.0.8 Yes
Application oracle financial_services_behavior_detection_platform 8.0.11 Yes
Application oracle financial_services_enterprise_case_management 8.0.7 Yes
Application oracle financial_services_enterprise_case_management 8.0.8 Yes
Application oracle financial_services_enterprise_case_management 8.0.11 Yes
Application oracle financial_services_foreign_account_tax_compliance_act_management 8.0.7 Yes
Application oracle financial_services_foreign_account_tax_compliance_act_management 8.0.8 Yes
Application oracle financial_services_foreign_account_tax_compliance_act_management 8.0.11 Yes
Application oracle financial_services_model_management_and_governance ≤ 8.1.1.0.0 Yes
Application oracle financial_services_trade-based_anti_money_laundering 8.0.7 Yes
Application oracle financial_services_trade-based_anti_money_laundering 8.0.8 Yes
Application oracle flexcube_investor_servicing 12.0.4 Yes
Application oracle flexcube_investor_servicing 12.1.0 Yes
Application oracle flexcube_investor_servicing 12.3.0 Yes
Application oracle flexcube_investor_servicing 12.4.0 Yes
Application oracle flexcube_investor_servicing 14.4.0 Yes
Application oracle flexcube_investor_servicing 14.5.0 Yes
Application oracle flexcube_private_banking 12.0.0 Yes
Application oracle flexcube_private_banking 12.1.0 Yes
Application oracle fusion_middleware 12.2.1.3.0 Yes
Application oracle fusion_middleware 12.2.1.4.0 Yes
Application oracle goldengate < 12.3.0.1.0 Yes
Application oracle goldengate < 21.5.0.0.220118 Yes
Application oracle goldengate_application_adapters < 23.1 Yes
Application oracle graph_server_and_client < 21.4.0 Yes
Application oracle health_sciences_clinical_development_analytics 4.0.1 Yes
Application oracle health_sciences_inform_crf_submit 6.2.1 Yes
Application oracle health_sciences_information_manager 3.0.2 Yes
Application oracle health_sciences_information_manager 3.0.3 Yes
Application oracle healthcare_data_repository 7.0.2 Yes
Application oracle healthcare_data_repository 8.1.0 Yes
Application oracle healthcare_data_repository 8.1.1 Yes
Application oracle healthcare_foundation ≤ 7.3.0.2 Yes
Application oracle healthcare_foundation ≤ 8.0.2 Yes
Application oracle healthcare_foundation ≤ 8.1.1 Yes
Application oracle healthcare_translational_research 4.1.0 Yes
Application oracle hospitality_inventory_management < 9.1.0 Yes
Application oracle hospitality_inventory_management 9.1.0 Yes
Application oracle hospitality_opera_5 5.6 Yes
Application oracle hospitality_reporting_and_analytics 9.1.0 Yes
Application oracle hospitality_suite8 8.10.2 Yes
Application oracle hospitality_suite8 8.11.0 Yes
Application oracle hospitality_suite8 8.12.0 Yes
Application oracle hospitality_suite8 8.13.0 Yes
Application oracle hospitality_suite8 8.14.0 Yes
Application oracle hyperion_infrastructure_technology 11.2.7.0 Yes
Application oracle ilearning 6.2 Yes
Application oracle ilearning 6.3 Yes
Application oracle instantis_enterprisetrack 17.1 Yes
Application oracle instantis_enterprisetrack 17.2 Yes
Application oracle instantis_enterprisetrack 17.3 Yes
Application oracle insurance_data_gateway 11.0.2 Yes
Application oracle insurance_data_gateway 11.1.0 Yes
Application oracle insurance_data_gateway 11.2.7 Yes
Application oracle insurance_data_gateway 11.3.0 Yes
Application oracle insurance_data_gateway 11.3.1 Yes
Application oracle insurance_insbridge_rating_and_underwriting ≤ 5.6.0 Yes
Application oracle insurance_insbridge_rating_and_underwriting 5.2.0 Yes
Application oracle insurance_policy_administration 11.0.2 Yes
Application oracle insurance_policy_administration 11.1.0 Yes
Application oracle insurance_policy_administration 11.2.7 Yes
Application oracle insurance_policy_administration 11.3.0 Yes
Application oracle insurance_policy_administration 11.3.1 Yes
Application oracle insurance_rules_palette 11.0.2 Yes
Application oracle insurance_rules_palette 11.1.0 Yes
Application oracle insurance_rules_palette 11.2.7 Yes
Application oracle insurance_rules_palette 11.3.0 Yes
Application oracle insurance_rules_palette 11.3.1 Yes
Application oracle jd_edwards_enterpriseone_tools 9.2.6.3 Yes
Application oracle oss_support_tools < 2.12.42 Yes
Application oracle peoplesoft_enterprise_peopletools 8.57 Yes
Application oracle peoplesoft_enterprise_peopletools 8.58 Yes
Application oracle peoplesoft_enterprise_peopletools 8.59 Yes
Application oracle policy_automation ≤ 12.2.24 Yes
Application oracle primavera_analytics 18.8.3.3 Yes
Application oracle primavera_analytics 19.12.11.1 Yes
Application oracle primavera_analytics 20.12.12.0 Yes
Application oracle primavera_data_warehouse 18.8.3.3 Yes
Application oracle primavera_data_warehouse 19.12.11.1 Yes
Application oracle primavera_data_warehouse 20.12.12.0 Yes
Application oracle primavera_gateway ≤ 17.12.11 Yes
Application oracle primavera_gateway ≤ 18.8.12 Yes
Application oracle primavera_gateway ≤ 19.12.11 Yes
Application oracle primavera_gateway ≤ 20.12.7 Yes
Application oracle primavera_p6_enterprise_project_portfolio_management ≤ 17.12.20 Yes
Application oracle primavera_p6_enterprise_project_portfolio_management ≤ 18.8.24 Yes
Application oracle primavera_p6_enterprise_project_portfolio_management ≤ 19.12.17.0 Yes
Application oracle primavera_p6_enterprise_project_portfolio_management ≤ 20.12.9.0 Yes
Application oracle primavera_p6_professional_project_management ≤ 17.12.20.0 Yes
Application oracle primavera_p6_professional_project_management ≤ 18.8.24.0 Yes
Application oracle primavera_p6_professional_project_management ≤ 19.12.17.0 Yes
Application oracle primavera_p6_professional_project_management ≤ 20.12.9.0 Yes
Application oracle primavera_unifier ≤ 17.12 Yes
Application oracle primavera_unifier 18.8 Yes
Application oracle primavera_unifier 19.12 Yes
Application oracle primavera_unifier 20.12 Yes
Application oracle primavera_unifier 21.12 Yes
Application oracle product_lifecycle_analytics 3.6.1 Yes
Application oracle rapid_planning ≤ 12.2.11 Yes
Application oracle real_user_experience_insight 13.4.1.0 Yes
Application oracle real_user_experience_insight 13.5.1.0 Yes
Application oracle retail_analytics ≤ 16.0.2 Yes
Application oracle retail_assortment_planning 16.0.3 Yes
Application oracle retail_back_office 14.1 Yes
Application oracle retail_central_office 14.1 Yes
Application oracle retail_customer_insights ≤ 16.0.2 Yes
Application oracle retail_extract_transform_and_load 13.2.8 Yes
Application oracle retail_financial_integration 14.1.3.2 Yes
Application oracle retail_financial_integration 15.0.3.1 Yes
Application oracle retail_financial_integration 16.0.3.0 Yes
Application oracle retail_financial_integration 19.0.1 Yes
Application oracle retail_integration_bus 14.1.3.2 Yes
Application oracle retail_integration_bus 15.0.3.1 Yes
Application oracle retail_integration_bus 16.0.3 Yes
Application oracle retail_integration_bus 19.0.1 Yes
Application oracle retail_merchandising_system 19.0.1 Yes
Application oracle retail_order_broker 16.0 Yes
Application oracle retail_order_broker 18.0 Yes
Application oracle retail_order_broker 19.1 Yes
Application oracle retail_order_management_system 19.5 Yes
Application oracle retail_point-of-service 14.1 Yes
Application oracle retail_predictive_application_server 14.1.3 Yes
Application oracle retail_predictive_application_server 15.0.3 Yes
Application oracle retail_predictive_application_server 16.0.3 Yes
Application oracle retail_price_management 14.1 Yes
Application oracle retail_price_management 15.0 Yes
Application oracle retail_price_management 16.0 Yes
Application oracle retail_returns_management 14.1 Yes
Application oracle retail_service_backbone 14.1.3.2 Yes
Application oracle retail_service_backbone 15.0.3.1 Yes
Application oracle retail_service_backbone 16.0.3 Yes
Application oracle retail_service_backbone 19.0.1 Yes
Application oracle retail_store_inventory_management 14.1 Yes
Application oracle retail_store_inventory_management 15.0 Yes
Application oracle retail_store_inventory_management 16.0 Yes
Application oracle retail_xstore_point_of_service 17.0.4 Yes
Application oracle retail_xstore_point_of_service 18.0.3 Yes
Application oracle retail_xstore_point_of_service 19.0.2 Yes
Application oracle retail_xstore_point_of_service 20.0.1 Yes
Application oracle siebel_ui_framework ≤ 21.12 Yes
Application oracle spatial_studio < 21.2.1 Yes
Application oracle storagetek_acsls 8.5.1 Yes
Application oracle storagetek_tape_analytics 2.4 Yes
Application oracle thesaurus_management_system 5.2.3 Yes
Application oracle thesaurus_management_system 5.3.0 Yes
Application oracle thesaurus_management_system 5.3.1 Yes
Application oracle timesten_in-memory_database < 21.1.1.1.0 Yes
Application oracle timesten_in-memory_database 21.1.1.1.0 Yes
Application oracle utilities_framework ≤ 4.3.0.6.0 Yes
Application oracle utilities_framework 4.2.0.3.0 Yes
Application oracle utilities_framework 4.4.0.0.0 Yes
Application oracle utilities_framework 4.4.0.2.0 Yes
Application oracle utilities_framework 4.4.0.3.0 Yes
Application oracle utilities_testing_accelerator 6.0.0.1.1 Yes
Application oracle utilities_testing_accelerator 6.0.0.2.2 Yes
Application oracle utilities_testing_accelerator 6.0.0.3.1 Yes
Application oracle weblogic_server 12.2.1.3.0 Yes
Application oracle weblogic_server 12.2.1.4.0 Yes
Application oracle weblogic_server 14.1.1.0.0 Yes
Application oracle zfs_storage_application_integration_engineering_software 1.3.3 Yes
References