Unauthenticated Access Vulnerability in Oracle Enterprise Manager UI Framework
CVE-2021-2053

6.1MEDIUM

Key Information:

Vendor
Oracle
Status
Enterprise Manager Base Platform
Vendor
CVE Published:
22 April 2021

Summary

A vulnerability exists in the UI Framework of Oracle's Enterprise Manager Base Platform that allows an unauthenticated attacker to exploit the system via HTTP. While this vulnerability primarily affects version 13.4.0.0, it poses risks that could extend beyond Enterprise Manager itself. Successful exploitation requires user interaction, leading to unauthorized manipulation of the platform's data—enabling attackers to potentially access, modify, or delete sensitive information. This breach can have significant consequences for organizations reliant on this management tool.

Affected Version(s)

Enterprise Manager Base Platform 13.4.0.0

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC
https://blog.stmcyber.com/vulns/cve-2021-2053/
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.