Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2021-2018

Published

3 years ago

Last Modified

3 years ago

CVSSv2.0 Severity

Medium

CVSSv3.1 Severity

High

Impact Analysis

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: CVE-2021-2018 affects Windows platform only. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)..

CVSSv2.0 Score

Severity: Medium
Base Score: 5.1/10
Exploit Score: 4.9/10
Access Vector: Network
Access Complexity: High
Authentication Required: None
Impact Score: 6.4/10
Confidentiality Impact: Partial
Availability Impact: Partial
Integrity Impact: Partial

CVSSv3.1 Score

Severity: High
Base Score: 8.3/10
Exploit Score: 1.6/10
Access Vector: Network
Access Complexity: High
Privileges Required: None
Impact Score: 6/10
Confidentiality Impact: High
Availability Impact: High
Integrity Impact: High
Scope: Changed
User Interaction: Required

Products Affected

CPE	Affected	Excluding
cpe:2.3:a:oracle:advanced_networking_option:18c:::::::	Yes	-
cpe:2.3:a:oracle:advanced_networking_option:19c:::::::	Yes	-
cpe:2.3:o:microsoft:windows:-:::::::*	No	-

References

https://www.oracle.com/security-alerts/cpujan2021.html