CVE-2021-2054

HOCH 7.2CVE-2021-2054 · Published 20/01/2021 · updated 17/06/2026

Kurz gesagt

CVE-2021-2054 ist eine Schwachstelle (HOCH (CVSS 7.2)) in rdbms sharding (oracle).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.7%, höher als bei 77.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
rdbms sharding oracle	`= 12.2.0.1= 18c= 19c`	No fix yet

Description

Vulnerability in the RDBMS Sharding component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Any View, Create Any Trigger privilege with network access via Oracle Net to compromise RDBMS Sharding. Successful attacks of this vulnerability can result in takeover of RDBMS Sharding. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

References

oracle.com/security-alerts/cpujan2021.html · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-21-083 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free