Oracle HTTP Server Vulnerability - CVE-2021-2480 - Vulnerability Database

Oracle HTTP Server Vulnerability - CVE-2021-2480

Medium

Reference: CVE-2021-2480

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-2480

Title: Oracle HTTP Server Vulnerability

Overview:

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).