{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-03T11:16:34.593","vulnerabilities":[{"cve":{"id":"CVE-2021-2462","sourceIdentifier":"secalert_us@oracle.com","published":"2021-07-21T00:15:16.687","lastModified":"2024-11-21T06:03:10.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Service Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Service Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Service Center accessible data as well as unauthorized read access to a subset of Oracle Commerce Service Center accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."},{"lang":"es","value":"Una vulnerabilidad en el producto Oracle Commerce Service Center de Oracle Commerce (componente: Commerce Service Center). Unas versiones Soportadas que están afectadas son 11.0.0, 11.1.0, 11.2.0 y 11.3.0-11.3.2. Una vulnerabilidad explotable fácilmente, permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer Oracle Commerce Service Center. Los ataques con éxito requieren una interacción humana de una persona diferente del atacante y mientras la vulnerabilidad se encuentra en Oracle Commerce Service Center, los ataques pueden afectar significativamente a otros productos. Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado de actualización, inserción o eliminación a algunos de los datos accesibles de Oracle Commerce Service Center, así como a un acceso no autorizado de lectura a un subconjunto de datos accesibles de Oracle Commerce Service Center. CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad y la Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"}],"metrics":{"cvssMetricV31":[{"source":"secalert_us@oracle.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_service_center:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3.0","versionEndIncluding":"11.3.2","matchCriteriaId":"FB446D68-C423-4557-BAFE-7144AFB448DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_service_center:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44D29B70-A088-4CC4-BDFC-08747755A3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_service_center:11.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DCD09B4-28B5-40F0-BDE4-782929BAE318"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_service_center:11.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F29AAFFB-FB2A-41DE-BA14-1BB5A9D78EA9"}]}]}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2021.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}