CVE-2021-2351

HIGH

MEDIUM Priority: 0.20 BB Relevance: 57/100

Published: 2021-07-20 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network No Auth Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Network

AC: High

PR: None

UI: Required

S: Changed

C: High

I: High

A: High

Description

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

Weakness Classification (2)

CWE-327 CWE-384

Affected Software (239)

Vendor	Product	Version
Oracle Corporation	WebLogic Server	12.2.1.3.0
Oracle Corporation	WebLogic Server	12.2.1.4.0
Oracle Corporation	WebLogic Server	14.1.1.0.0
oracle	advanced_networking_option	12.1.0.2
oracle	advanced_networking_option	12.2.0.1
oracle	advanced_networking_option	19c
oracle	agile_engineering_data_management	6.2.1.0
oracle	agile_product_lifecycle_management	9.3.6
oracle	agile_product_lifecycle_management_for_process	6.2.2.0
oracle	agile_product_lifecycle_management_for_process	6.2.3.0
oracle	airlines_data_model	12.1.1.0.0
oracle	airlines_data_model	12.2.0.1.0
oracle	application_performance_management	13.4.1.0
oracle	application_performance_management	13.5.1.0
oracle	application_testing_suite	13.3.0.1
oracle	argus_analytics	8.2.1
oracle	argus_analytics	8.2.2
oracle	argus_analytics	8.2.3
oracle	argus_insight	8.2.1
oracle	argus_insight	8.2.2
oracle	argus_insight	8.2.3
oracle	argus_mart	8.2.1
oracle	argus_mart	8.2.2
oracle	argus_mart	8.2.3
oracle	argus_safety	8.2.1
oracle	argus_safety	8.2.2
oracle	argus_safety	8.2.3
oracle	banking_apis	18.1 – 18.3
oracle	banking_apis	19.1
oracle	banking_apis	19.2