CVE-2021-2391: Critical severity oracle analytics publisher vulnerability
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-2391?
CVE-2021-2391 is a vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Scheduler).
Which versions of Oracle BI Publisher are affected by CVE-2021-2391?
The affected versions are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0.
What is the severity of CVE-2021-2391?
The severity of CVE-2021-2391 is critical with a CVSS score of 8.8.
How can CVE-2021-2391 be exploited?
CVE-2021-2391 can be easily exploited by a low privileged attacker with network access via HTTP.
Where can I find more information about CVE-2021-2391?
You can find more information about CVE-2021-2391 at the following reference link: [Oracle Security Alerts - CPU Jul 2021](https://www.oracle.com/security-alerts/cpujul2021.html).