{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T05:26:49.367","vulnerabilities":[{"cve":{"id":"CVE-2021-2035","sourceIdentifier":"secalert_us@oracle.com","published":"2021-01-20T15:15:47.753","lastModified":"2024-11-21T06:02:13.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Export Full Database privilege with network access via Oracle Net to compromise RDBMS Scheduler. Successful attacks of this vulnerability can result in takeover of RDBMS Scheduler. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."},{"lang":"es","value":"Vulnerabilidad en el componente RDBMS Scheduler de Oracle Database Server. Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c. Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado tener el privilegio Export Full Database con acceso de red por medio de Oracle Net comprometer a RDBMS Scheduler. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de RDBMS Scheduler. CVSS 3.1 Puntuación Base 8.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)"}],"metrics":{"cvssMetricV31":[{"source":"secalert_us@oracle.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:rdbms_scheduler:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A8FD3A13-7830-4942-B364-CBA27AE4BADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:rdbms_scheduler:12.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7FBAAFEB-2202-43EC-9EEA-F1285852A1B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:rdbms_scheduler:18c:*:*:*:*:*:*:*","matchCriteriaId":"473F9C47-D9F1-40FE-93A5-8917DC72A700"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:rdbms_scheduler:19c:*:*:*:*:*:*:*","matchCriteriaId":"A3981C8A-F66A-44D9-A590-707CCE63B768"}]}]}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}