How severe is CVE-2021-2023?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.7 out of 10.

What type of vulnerability is CVE-2021-2023?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2021-2023 - MEDIUM Severity | CVSS 4.7

Vulnerability Description

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).

Related Vulnerabilities

CVE-2016-0623

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component.

NVD-CWE-Other2016

CVE-2016-0642

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

NVD-CWE-Other2016

CVE-2016-0655

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors re...

NVD-CWE-Other2016

CVE-2016-0661

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options.

NVD-CWE-Other2016

CVE-2016-0663

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema.

NVD-CWE-Other2016

CVE-2016-0676

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.

NVD-CWE-Other2016