CVE-2021-2097

CVE-2021-2097 is an easily exploitable vulnerability affecting Oracle iSupport versions 12.1.1-12.1.3 and 12.2.3-12.2.10, specifically within the Profile component. This unauthenticated flaw allows attackers with network access via HTTP to compromise iSupport, requiring user interaction from a non-attacker. Successful exploitation can lead to unauthorized access to critical data, complete access to all iSupport-accessible data, and unauthorized modification of some iSupport data. The vulnerability has a CVSS 3.1 Base Score of 8.2 (High), indicating significant confidentiality and integrity impacts. Its attack vector is network-based with low attack complexity, but it requires user interaction and impacts additional products beyond iSupport. Currently, there is no evidence of active exploitation, nor is exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.