The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
HighVulnerability
CVE-2021-2277: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2021-2277
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.1%
Summary
CVE-2021-2277 affects the Core component of the Oracle Coherence product in Oracle Fusion Middleware. Supported versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 are affected. An unauthenticated attacker with network access via HTTP can easily exploit it to compromise Oracle Coherence, gaining unauthorized access to critical data or complete access to all Oracle Coherence accessible data. The CVSS 3.1 Base Score is 7.5, with impact on confidentiality.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.