CVE-2021-2333

MEDIUM

Oracle Database Server <19c - Confidentiality Impact

Title source: llm
STIX 2.1

Description

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML DB accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

References (1)

Core 1
Core References

Scores

CVSS v3 4.9
EPSS 0.0059
EPSS Percentile 69.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (3)
oracle/xml_database 12.1.0.2
oracle/xml_database 12.2.0.1
oracle/xml_database 19c
Published Jul 21, 2021
Tracked Since Feb 18, 2026