CVE-2021-2240

CVE-2021-2240 is a vulnerability in Oracle Outside In Technology, specifically version 8.5.5 of the Outside In Filters component. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise the affected software. Successful exploitation can lead to unauthorized data modification (update, insert, delete), unauthorized read access to a subset of data, and a partial denial of service. The vulnerability has a CVSS 3.1 Base Score of 7.3 (High), indicating significant impacts on confidentiality, integrity, and availability. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges. The CVSS score assumes data is passed over a network, and may be lower if not. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.