Improper input validation in Oracle Database Server - CVE-2021-2245

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU52382

Improper input validation in Oracle Database Server - CVE-2021-2245

Published: April 21, 2021


Vulnerability identifier: #VU52382
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-2245
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote privileged user to manipulate data.

The vulnerability exists due to improper input validation within the Oracle Database - Enterprise Edition Unified Audit in Oracle Database Server. A remote privileged user can exploit this vulnerability to manipulate data.


Affected software

Oracle Database Server
IBM Emptoris Supplier Lifecycle Management
IBM Emptoris Strategic Supply Management Platform
IBM Emptoris Program Management
IBM Emptoris Contract Management
IBM Emptoris Sourcing

How to mitigate CVE-2021-2245

Install updates from vendor's website.

IBM Emptoris Supplier Lifecycle Management - addressed in versions 10.1.0.39, 10.1.1.36, 10.1.3.31
IBM Emptoris Strategic Supply Management Platform - addressed in versions 10.1.0.39, 10.1.1.36, 10.1.3.31
IBM Emptoris Program Management - addressed in versions 10.1.0.39, 10.1.1.36, 10.1.3.31
IBM Emptoris Contract Management - addressed in versions 10.1.0.39, 10.1.1.36, 10.1.3.31
IBM Emptoris Sourcing - addressed in versions 10.1.0.39, 10.1.1.36, 10.1.3.31

External References

Related Security Bulletins