Vulnetix
Try Vulnetix Request Demo
CVE-2021-2248 PUBLISHED CVSS 7.5 HIGH

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via SKID to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

EPSS 3.97% · 88.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
3.97%
88.3th percentile

Affected Products

VendorProductVersions
Oracle CorporationSecure Global Desktop5.6
oraclesecure_global_desktop5.6

Timeline

References

Open in Interactive Console →