CVE-2021-2040

CVE-2021-2040 is a vulnerability in Oracle Argus Safety, specifically affecting version 8.2.2 within the Case Form and Local Affiliate Form components. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires user interaction and can lead to unauthorized read, update, insert, or delete access to a subset of Oracle Argus Safety's data, potentially impacting additional products. The vulnerability carries a CVSS 3.1 Base Score of 6.1 (Medium), indicating moderate confidentiality and integrity impacts. Its attack vector is network-based with low attack complexity, but requires user interaction. Currently, there is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.