VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Oct 20, 2021· Updated Jun 17, 2026

CVE-2021-2476

CVE-2021-2476

Description

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Transportation Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products

3
  • Oracle Corporation/Transportation Management3 versions
    cpe:2.3:a:oracle:transportation_management:6.4.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:transportation_management:6.4.3:*:*:*:*:*:*:*
    • (no CPE)range: = 6.4.3
    • (no CPE)range: 6.4.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.