Low severity2.7NVD Advisory· Published Apr 22, 2021· Updated Jun 17, 2026
CVE-2021-2175
CVE-2021-2175
Description
Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any View, Select Any View privilege with network access via Oracle Net to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Database Vault accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Range: 12.1.0.2, 12.2.0.1, 18c, 19c
12.1.0.2, 12.2.0.1, 18c, 19c+ 4 more
- (no CPE)range: 12.1.0.2, 12.2.0.1, 18c, 19c
- cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*
- Range: 12.1.0.2
Patches
Vulnerability mechanics
References
3- www.oracle.com/security-alerts/cpuapr2021.htmlnvdPatchVendor Advisory
- packetstormsecurity.com/files/170373/Oracle-Database-Vault-Metadata-Exposure.htmlnvdExploitThird Party AdvisoryVDB Entry
- databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.