CVE-2021-2351
Broken cryptographic algorithm in Oracle Advanced Networking Option
CVSS Skor
8.3
EPSS İhtimal
%2.4
Risk Skoru
0.2
Yayın
5 yıl önce
Resmî yama doğrulandı
Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2021-2351 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2021-2351 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | oracle | advanced networking option | İncele |
| 2 | oracle | advanced networking option | İncele |
| 3 | oracle | advanced networking option | İncele |
| 4 | oracle | agile engineering data management | İncele |
| 5 | oracle | agile product lifecycle management | İncele |
| 6 | oracle | agile product lifecycle management for process | İncele |
| 7 | oracle | agile product lifecycle management for process | İncele |
| 8 | oracle | airlines data model | İncele |
| 9 | oracle | airlines data model | İncele |
| 10 | oracle | application performance management | İncele |
| 11 | oracle | application performance management | İncele |
| 12 | oracle | application testing suite | İncele |
| 13 | oracle | argus analytics | İncele |
| 14 | oracle | argus analytics | İncele |
| 15 | oracle | argus analytics | İncele |
| 16 | oracle | argus insight | İncele |
| 17 | oracle | argus insight | İncele |
| 18 | oracle | argus insight | İncele |
| 19 | oracle | argus mart | İncele |
| 20 | oracle | argus mart | İncele |
| 21 | oracle | argus mart | İncele |
| 22 | oracle | argus safety | İncele |
| 23 | oracle | argus safety | İncele |
| 24 | oracle | argus safety | İncele |
| 25 | oracle | banking apis | İncele |
| 26 | oracle | banking apis | İncele |
| 27 | oracle | banking apis | İncele |
| 28 | oracle | banking apis | İncele |
| 29 | oracle | banking apis | İncele |
| 30 | oracle | banking digital experience | İncele |
| 31 | oracle | banking digital experience | İncele |
| 32 | oracle | banking digital experience | İncele |
| 33 | oracle | banking digital experience | İncele |
| 34 | oracle | banking digital experience | İncele |
| 35 | oracle | banking digital experience | İncele |
| 36 | oracle | banking enterprise default management | İncele |
| 37 | oracle | banking enterprise default management | İncele |
| 38 | oracle | banking platform | İncele |
| 39 | oracle | banking platform | İncele |
| 40 | oracle | banking platform | İncele |
| 41 | oracle | big data spatial and graph | İncele |
| 42 | oracle | blockchain platform | İncele |
| 43 | oracle | clinical | İncele |
| 44 | oracle | clinical | İncele |
| 45 | oracle | commerce platform | İncele |
| 46 | oracle | commerce platform | İncele |
| 47 | oracle | commerce platform | İncele |
| 48 | oracle | communications application session controller | İncele |
| 49 | oracle | communications billing and revenue management | İncele |
| 50 | oracle | communications billing and revenue management | İncele |
| 51 | oracle | communications calendar server | İncele |
| 52 | oracle | communications contacts server | İncele |
| 53 | oracle | communications convergent charging controller | İncele |
| 54 | oracle | communications convergent charging controller | İncele |
| 55 | oracle | communications data model | İncele |
| 56 | oracle | communications data model | İncele |
| 57 | oracle | communications data model | İncele |
| 58 | oracle | communications data model | İncele |
| 59 | oracle | communications data model | İncele |
| 60 | oracle | communications design studio | İncele |
| 61 | oracle | communications design studio | İncele |
| 62 | oracle | communications design studio | İncele |
| 63 | oracle | communications design studio | İncele |
| 64 | oracle | communications diameter intelligence hub | İncele |
| 65 | oracle | communications ip service activator | İncele |
| 66 | oracle | communications metasolv solution | İncele |
| 67 | oracle | communications network charging and control | İncele |
| 68 | oracle | communications network charging and control | İncele |
| 69 | oracle | communications network integrity | İncele |
| 70 | oracle | communications network integrity | İncele |
| 71 | oracle | communications pricing design center | İncele |
| 72 | oracle | communications pricing design center | İncele |
| 73 | oracle | communications services gatekeeper | İncele |
| 74 | oracle | communications session report manager | İncele |
| 75 | oracle | communications session route manager | İncele |
| 76 | oracle | data integrator | İncele |
| 77 | oracle | data integrator | İncele |
| 78 | oracle | demantra demand management | İncele |
| 79 | oracle | documaker | İncele |
| 80 | oracle | documaker | İncele |
| 81 | oracle | documaker | İncele |
| 82 | oracle | enterprise data quality | İncele |
| 83 | oracle | enterprise data quality | İncele |
| 84 | oracle | enterprise manager base platform | İncele |
| 85 | oracle | enterprise manager base platform | İncele |
| 86 | oracle | enterprise manager ops center | İncele |
| 87 | oracle | financial services analytical applications infrastructure | İncele |
| 88 | oracle | financial services behavior detection platform | İncele |
| 89 | oracle | financial services behavior detection platform | İncele |
| 90 | oracle | financial services behavior detection platform | İncele |
| 91 | oracle | financial services enterprise case management | İncele |
| 92 | oracle | financial services enterprise case management | İncele |
| 93 | oracle | financial services enterprise case management | İncele |
| 94 | oracle | financial services foreign account tax compliance act management | İncele |
| 95 | oracle | financial services foreign account tax compliance act management | İncele |
| 96 | oracle | financial services foreign account tax compliance act management | İncele |
| 97 | oracle | financial services model management and governance | İncele |
| 98 | oracle | financial services trade-based anti money laundering | İncele |
| 99 | oracle | financial services trade-based anti money laundering | İncele |
| 100 | oracle | flexcube investor servicing | İncele |
| 101 | oracle | flexcube investor servicing | İncele |
| 102 | oracle | flexcube investor servicing | İncele |
| 103 | oracle | flexcube investor servicing | İncele |
| 104 | oracle | flexcube investor servicing | İncele |
| 105 | oracle | flexcube investor servicing | İncele |
| 106 | oracle | flexcube private banking | İncele |
| 107 | oracle | flexcube private banking | İncele |
| 108 | oracle | fusion middleware | İncele |
| 109 | oracle | fusion middleware | İncele |
| 110 | oracle | goldengate | İncele |
| 111 | oracle | goldengate | İncele |
| 112 | oracle | goldengate application adapters | İncele |
| 113 | oracle | graph server and client | İncele |
| 114 | oracle | health sciences clinical development analytics | İncele |
| 115 | oracle | health sciences inform crf submit | İncele |
| 116 | oracle | health sciences information manager | İncele |
| 117 | oracle | health sciences information manager | İncele |
| 118 | oracle | healthcare data repository | İncele |
| 119 | oracle | healthcare data repository | İncele |
| 120 | oracle | healthcare data repository | İncele |
| 121 | oracle | healthcare foundation | İncele |
| 122 | oracle | healthcare foundation | İncele |
| 123 | oracle | healthcare foundation | İncele |
| 124 | oracle | healthcare translational research | İncele |
| 125 | oracle | hospitality inventory management | İncele |
| 126 | oracle | hospitality inventory management | İncele |
| 127 | oracle | hospitality opera 5 | İncele |
| 128 | oracle | hospitality reporting and analytics | İncele |
| 129 | oracle | hospitality suite8 | İncele |
| 130 | oracle | hospitality suite8 | İncele |
| 131 | oracle | hospitality suite8 | İncele |
| 132 | oracle | hospitality suite8 | İncele |
| 133 | oracle | hospitality suite8 | İncele |
| 134 | oracle | hyperion infrastructure technology | İncele |
| 135 | oracle | ilearning | İncele |
| 136 | oracle | ilearning | İncele |
| 137 | oracle | instantis enterprisetrack | İncele |
| 138 | oracle | instantis enterprisetrack | İncele |
| 139 | oracle | instantis enterprisetrack | İncele |
| 140 | oracle | insurance data gateway | İncele |
| 141 | oracle | insurance data gateway | İncele |
| 142 | oracle | insurance data gateway | İncele |
| 143 | oracle | insurance data gateway | İncele |
| 144 | oracle | insurance data gateway | İncele |
| 145 | oracle | insurance insbridge rating and underwriting | İncele |
| 146 | oracle | insurance insbridge rating and underwriting | İncele |
| 147 | oracle | insurance policy administration | İncele |
| 148 | oracle | insurance policy administration | İncele |
| 149 | oracle | insurance policy administration | İncele |
| 150 | oracle | insurance policy administration | İncele |
| 151 | oracle | insurance policy administration | İncele |
| 152 | oracle | insurance rules palette | İncele |
| 153 | oracle | insurance rules palette | İncele |
| 154 | oracle | insurance rules palette | İncele |
| 155 | oracle | insurance rules palette | İncele |
| 156 | oracle | insurance rules palette | İncele |
| 157 | oracle | jd edwards enterpriseone tools | İncele |
| 158 | oracle | oss support tools | İncele |
| 159 | oracle | peoplesoft enterprise peopletools | İncele |
| 160 | oracle | peoplesoft enterprise peopletools | İncele |
| 161 | oracle | peoplesoft enterprise peopletools | İncele |
| 162 | oracle | policy automation | İncele |
| 163 | oracle | primavera analytics | İncele |
| 164 | oracle | primavera analytics | İncele |
| 165 | oracle | primavera analytics | İncele |
| 166 | oracle | primavera data warehouse | İncele |
| 167 | oracle | primavera data warehouse | İncele |
| 168 | oracle | primavera data warehouse | İncele |
| 169 | oracle | primavera gateway | İncele |
| 170 | oracle | primavera gateway | İncele |
| 171 | oracle | primavera gateway | İncele |
| 172 | oracle | primavera gateway | İncele |
| 173 | oracle | primavera p6 enterprise project portfolio management | İncele |
| 174 | oracle | primavera p6 enterprise project portfolio management | İncele |
| 175 | oracle | primavera p6 enterprise project portfolio management | İncele |
| 176 | oracle | primavera p6 enterprise project portfolio management | İncele |
| 177 | oracle | primavera p6 professional project management | İncele |
| 178 | oracle | primavera p6 professional project management | İncele |
| 179 | oracle | primavera p6 professional project management | İncele |
| 180 | oracle | primavera p6 professional project management | İncele |
| 181 | oracle | primavera unifier | İncele |
| 182 | oracle | primavera unifier | İncele |
| 183 | oracle | primavera unifier | İncele |
| 184 | oracle | primavera unifier | İncele |
| 185 | oracle | primavera unifier | İncele |
| 186 | oracle | product lifecycle analytics | İncele |
| 187 | oracle | rapid planning | İncele |
| 188 | oracle | real user experience insight | İncele |
| 189 | oracle | real user experience insight | İncele |
| 190 | oracle | retail analytics | İncele |
| 191 | oracle | retail assortment planning | İncele |
| 192 | oracle | retail back office | İncele |
| 193 | oracle | retail central office | İncele |
| 194 | oracle | retail customer insights | İncele |
| 195 | oracle | retail extract transform and load | İncele |
| 196 | oracle | retail financial integration | İncele |
| 197 | oracle | retail financial integration | İncele |
| 198 | oracle | retail financial integration | İncele |
| 199 | oracle | retail financial integration | İncele |
| 200 | oracle | retail integration bus | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 8.3 | CVSS V31 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H | NVD |
| 7.5 | CVSS V31 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | NVD |
| 5.1 | CVSS V2 | — | AV:N/AC:H/Au:N/C:P/I:P/A:P | NVD |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
8 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.
Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
CVE-2021-2351 için veritabanında 4 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-2351 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-2351 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekiyor
Resmi Kaynaklar ve Danışma Bültenleri
https://www.oracle.com/security-alerts/cpuapr2022.htmlpatchhttps://www.oracle.com/security-alerts/cpujan2022.htmlpatchhttps://www.oracle.com/security-alerts/cpujan2023.htmlvendor-advisoryhttps://www.oracle.com/security-alerts/cpujul2021.htmlpatchhttps://www.oracle.com/security-alerts/cpujul2022.htmlvendor-advisoryhttps://www.oracle.com/security-alerts/cpuoct2021.htmlpatch
İlgili Benzer Açıklar
9.8
CVE-2025-61882 Aktif sömürülüyorImproper authentication in Oracle Corporation Oracle Concurrent Processing
Geçici çözüm Public Exploits:10EPSS %100
9.8
CVE-2020-1938 Aktif sömürülüyorVulnerability in Apache Tomcat
Yama doğrulandı Public Exploits:12EPSS %99
9.8
CVE-2012-4681 Aktif sömürülüyorVulnerability in N/a
Geçici çözüm Public Exploits:3EPSS %99
9.8
CVE-2012-0507 Aktif sömürülüyorVulnerability in N/a
Kısmi yama Public Exploits:1EPSS %98
9.8
CVE-2018-1273 Aktif sömürülüyorCode injection in Spring By Pivotal Spring Framework
Yama doğrulandı Public Exploits:8EPSS %97
9.8
CVE-2026-35273 Aktif sömürülüyorVulnerability in Oracle Corporation PeopleSoft Enterprise PeopleTools
Geçici çözüm Public Exploits:4EPSS %97
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-2351"