First published: Thu Apr 22 2021(Updated: )
Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Enterprise Manager for Oracle Database | =12.2.1.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2021-2134.
The title of this vulnerability is Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager.
The affected software version is Oracle Enterprise Manager 12.2.1.4.
The severity of this vulnerability is medium with a CVSS score of 6.5.
You can find more information about this vulnerability in the Oracle Security Alerts page: https://www.oracle.com/security-alerts/cpuapr2021.html