CVE-2021-2153 is a vulnerability in the Mobile Expenses component of Oracle Internet Expenses, affecting versions 12.2.3 through 12.2.10 of Oracle E-Business Suite. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. While successful attacks require human interaction, they can lead to unauthorized modification of Oracle Internet Expenses data. The vulnerability has a CVSS 3.1 Base Score of 4.3 (Medium), indicating a low integrity impact. The attack vector is network-based, with low attack complexity, but requires user interaction. There is no confidentiality or availability impact. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has garnered minimal community discussion or media coverage, suggesting low public awareness and attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 12.2.3, <= 12.2.10CPE matchmatch criteria | cpe:2.3:a:oracle:internet_expenses:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.