| Package | Affected versions | Patched versions |
|---|---|---|
| advanced networking option | = 12.1.0.2= 12.2.0.1= 19c | |
| agile engineering data management | = 6.2.1.0 | |
| agile product lifecycle management | = 9.3.6 | |
| agile product lifecycle management for process | = 6.2.2.0= 6.2.3.0 | |
| airlines data model | = 12.1.1.0.0= 12.2.0.1.0 | |
| application performance management | = 13.4.1.0= 13.5.1.0 | |
| application testing suite | = 13.3.0.1 |
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free| argus analytics | = 8.2.1= 8.2.2= 8.2.3 |
| argus insight | = 8.2.1= 8.2.2= 8.2.3 |
| argus mart | = 8.2.1= 8.2.2= 8.2.3 |
| argus safety | = 8.2.1= 8.2.2= 8.2.3 |
| banking apis | = 19.1= 19.2= 20.1= 21.1≥ 18.1, ≤ 18.3 |
| banking digital experience | = 17.2= 19.1= 19.2= 20.1= 21.1≥ 18.1, ≤ 18.3 |
| banking enterprise default management | = 2.10.0= 2.12.0 |
| banking platform | = 2.12.0= 2.6.2= 2.7.1 |
| big data spatial and graph | < 23.1 | 23.1 |
| blockchain platform | = 21.1.2 |
| clinical | = 5.2.1= 5.2.2 |
| commerce platform | = 11.3.0= 11.3.1= 11.3.2 |
| communications application session controller | = 3.9.0 |
| communications billing and revenue management | = 12.0.0.4= 12.0.0.5 |
| communications calendar server | = 8.0.0.5.0 |
| communications contacts server | = 8.0.0.3.0 |
| communications convergent charging controller | = 6.0.1.0.0≥ 12.0.1.0.0, ≤ 12.0.4.0.0 |
| communications data model | = 11.3.2.1.0= 11.3.2.2.0= 11.3.2.3.0= 12.1.0.1.0= 12.1.2.0.0 |
| communications design studio | = 7.3.5= 7.4.0= 7.4.1= 7.4.2 |
| communications diameter intelligence hub | ≥ 8.0.0, ≤ 8.2.3 |
| communications ip service activator | = 7.4.0 |
| communications metasolv solution | = 6.3.1 |
| communications network charging and control | = 6.0.1.0.0≥ 12.0.1.0, ≤ 12.0.4.0.0 |
| communications network integrity | = 7.3.5= 7.3.6 |
| communications pricing design center | = 12.0.0.4= 12.0.0.5 |
| communications services gatekeeper | = 7.0 |
| communications session report manager | ≥ 8.0.0, ≤ 8.2.5.0 |
| communications session route manager | ≥ 8.2.0, ≤ 8.2.5 |
| data integrator | = 12.2.1.3.0= 12.2.1.4.0 |
| demantra demand management | ≥ 12.2.6, ≤ 12.2.11 |
| documaker | = 12.6.0= 12.7.0≥ 12.6.2, ≤ 12.6.4 |
| enterprise data quality | = 12.2.1.3.0= 12.2.1.4.0 |
| enterprise manager base platform | = 13.4.0.0= 13.5.0.0 |
| enterprise manager ops center | = 12.4.0.0 |
| financial services analytical applications infrastructure | ≥ 8.0.7, ≤ 8.1.1 |
| financial services behavior detection platform | = 8.0.11= 8.0.7= 8.0.8 |
| financial services enterprise case management | = 8.0.11= 8.0.7= 8.0.8 |
| financial services foreign account tax compliance act management | = 8.0.11= 8.0.7= 8.0.8 |
| financial services model management and governance | ≥ 8.0.8.0.0, ≤ 8.1.1.0.0 |
| financial services trade-based anti money laundering | = 8.0.7= 8.0.8 |
| flexcube investor servicing | = 12.0.4= 12.1.0= 12.3.0= 12.4.0= 14.4.0= 14.5.0 |
| flexcube private banking | = 12.0.0= 12.1.0 |
| fusion middleware | = 12.2.1.3.0= 12.2.1.4.0 |
| goldengate | ≥ 19.1.0.0.1, < 21.5.0.0.220118< 12.3.0.1.0 | 21.5.0.0.22011812.3.0.1.0 |
| goldengate application adapters | < 23.1 | 23.1 |
| graph server and client | < 21.4.0 | 21.4.0 |
| health sciences clinical development analytics | = 4.0.1 |
| health sciences inform crf submit | = 6.2.1 |
| health sciences information manager | = 3.0.2= 3.0.3 |
| healthcare data repository | = 7.0.2= 8.1.0= 8.1.1 |
| healthcare foundation | ≥ 7.3.0, ≤ 7.3.0.2≥ 8.0.0, ≤ 8.0.2≥ 8.1.0, ≤ 8.1.1 |
| healthcare translational research | = 4.1.0 |
| hospitality inventory management | = 9.1.0< 9.1.0 | 9.1.0 |
| hospitality opera 5 | = 5.6 |
| hospitality reporting and analytics | = 9.1.0 |
| hospitality suite8 | = 8.10.2= 8.11.0= 8.12.0= 8.13.0= 8.14.0 |
| hyperion infrastructure technology | = 11.2.7.0 |
| ilearning | = 6.2= 6.3 |
| instantis enterprisetrack | = 17.1= 17.2= 17.3 |
| insurance data gateway | = 11.0.2= 11.1.0= 11.2.7= 11.3.0= 11.3.1 |
| insurance insbridge rating and underwriting | = 5.2.0≥ 5.4, ≤ 5.6.0 |
| insurance policy administration | = 11.0.2= 11.1.0= 11.2.7= 11.3.0= 11.3.1 |
| insurance rules palette | = 11.0.2= 11.1.0= 11.2.7= 11.3.0= 11.3.1 |
| jd edwards enterpriseone tools | = 9.2.6.3 |
| oss support tools | < 2.12.42 | 2.12.42 |
| peoplesoft enterprise peopletools | = 8.57= 8.58= 8.59 |
| policy automation | ≥ 12.2.0, ≤ 12.2.24 |
| primavera analytics | = 18.8.3.3= 19.12.11.1= 20.12.12.0 |
| primavera data warehouse | = 18.8.3.3= 19.12.11.1= 20.12.12.0 |
| primavera gateway | ≥ 17.12.0, ≤ 17.12.11≥ 18.8.0, ≤ 18.8.12≥ 19.12.0, ≤ 19.12.11≥ 20.12.0, ≤ 20.12.7 |
| primavera p6 enterprise project portfolio management | ≥ 17.12.0.0, ≤ 17.12.20≥ 18.8.0.0, ≤ 18.8.24≥ 19.12.0.0, ≤ 19.12.17.0≥ 20.12.0.0, ≤ 20.12.9.0 |
| primavera p6 professional project management | ≥ 17.12, ≤ 17.12.20.0≥ 18.8, ≤ 18.8.24.0≥ 19.12.0.0, ≤ 19.12.17.0≥ 20.12.0.0, ≤ 20.12.9.0 |
| primavera unifier | = 18.8= 19.12= 20.12= 21.12≥ 17.7, ≤ 17.12 |
| product lifecycle analytics | = 3.6.1 |
| rapid planning | ≥ 12.2.6, ≤ 12.2.11 |
| real user experience insight | = 13.4.1.0= 13.5.1.0 |
| retail analytics | ≥ 16.0.0, ≤ 16.0.2 |
| retail assortment planning | = 16.0.3 |
| retail back office | = 14.1 |
| retail central office | = 14.1 |
| retail customer insights | ≥ 16.0, ≤ 16.0.2 |
| retail extract transform and load | = 13.2.8 |
| retail financial integration | = 14.1.3.2= 15.0.3.1= 16.0.3.0= 19.0.1 |
| retail integration bus | = 14.1.3.2= 15.0.3.1= 16.0.3= 19.0.1 |
| retail merchandising system | = 19.0.1 |
| retail order broker | = 16.0= 18.0= 19.1 |
| retail order management system | = 19.5 |
| retail point-of-service | = 14.1 |
| retail predictive application server | = 14.1.3= 15.0.3= 16.0.3 |
| retail price management | = 14.1= 15.0= 16.0 |
| retail returns management | = 14.1 |
| retail service backbone | = 14.1.3.2= 15.0.3.1= 16.0.3= 19.0.1 |
| retail store inventory management | = 14.1= 15.0= 16.0 |
| retail xstore point of service | = 17.0.4= 18.0.3= 19.0.2= 20.0.1 |
| siebel ui framework | ≤ 21.12 |
| spatial studio | < 21.2.1 | 21.2.1 |
| storagetek acsls | = 8.5.1 |
| storagetek tape analytics | = 2.4 |
| thesaurus management system | = 5.2.3= 5.3.0= 5.3.1 |
| timesten in-memory database | = 21.1.1.1.0< 21.1.1.1.0 | 21.1.1.1.0 |
| utilities framework | = 4.2.0.3.0= 4.4.0.0.0= 4.4.0.2.0= 4.4.0.3.0≥ 4.3.0.1.0, ≤ 4.3.0.6.0 |
| utilities testing accelerator | = 6.0.0.1.1= 6.0.0.2.2= 6.0.0.3.1 |
| weblogic server | = 12.2.1.3.0= 12.2.1.4.0= 14.1.1.0.0 |
| zfs storage application integration engineering software | = 1.3.3 |