Skip to content
OpenAdvisories
Low · 3.7 CVE-2021-2480 EUVD-2021-16938GHSA-34j9-6q3m-7mrr

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affect…

Published Oct 20, 2021 · Updated Sep 25, 2024 · Assigned by oracle

Description

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Affected products

VendorProductAffectedFixed
Oracle HTTP Server 11.1.1.9.0 —

References