CVE-2021-2080

CVE-2021-2080 is an easily exploitable vulnerability affecting Oracle Configurator versions 12.1 and 12.2, specifically within the UI Servlet component. An unauthenticated attacker can leverage this vulnerability via HTTP, requiring human interaction from a non-attacker to succeed. Successful exploitation can lead to unauthorized access to critical data, complete access to all Oracle Configurator accessible data, and unauthorized modification of some data, with potential significant impact on additional products. The vulnerability carries a CVSS 3.1 Base Score of 8.2 (High), indicating a high severity due to its network attack vector, low attack complexity, and high confidentiality and low integrity impacts. While the vulnerability is easily exploitable, it requires user interaction. Currently, there is no evidence of active exploitation, and no public exploit code is available for Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.