CVE-2021-2140

CVE-2021-2140 is an easily exploitable vulnerability in Oracle Financial Services Analytical Applications Infrastructure (versions 8.0.6-8.1.0), specifically within its Rules Framework component. An unauthenticated attacker with network access via HTTP can compromise the system, requiring human interaction from a non-attacker to succeed. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of accessible data within the affected product and potentially impact additional products. This vulnerability has a CVSS 3.1 Base Score of 6.1 (Medium), indicating moderate severity with low confidentiality and integrity impacts. The attack vector is network-based, with low attack complexity, but requires user interaction. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.