Unauthenticated Access Vulnerability in Oracle Configurator from Oracle
CVE-2021-2080
What is CVE-2021-2080?
This vulnerability in Oracle Configurator allows unauthenticated attackers with HTTP network access to compromise the system. While successful exploitation requires interaction from a user not involved in the attack, the consequences can be severe. Attackers may gain unauthorized access to sensitive data or exert complete control over accessible data within Oracle Configurator, enabling them to update, insert, or delete this data without authorization. Given the broad impact this can have, it is crucial for affected organizations to apply necessary patches and maintain a proactive security posture.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Configurator 12.1
Configurator 12.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved