CVE-2021-2248critical

CVE-2021-2248: critical vulnerability in Oracle Corporation Secure Global Desktop

Published · Updated

Follow this CVE+ Monitor Secure Global Desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 2.5%
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Oracle Corporation · Secure Global Desktop
Related CVEs — Oracle Corporation Secure Global Desktop

In the same product, most dangerous first.

CVE-2021-2177CRITICALCVE-2021-2177EPSS 2.5%CVE-2021-2221CRITICALCVE-2021-2221EPSS 2.0%CVE-2021-2446CRITICALCVE-2021-2446EPSS 1.6%CVE-2021-2447CRITICALCVE-2021-2447EPSS 1.1%CVE-2021-35649MEDIUMCVE-2021-35649EPSS 0.8%CVE-2021-35650MEDIUMCVE-2021-35650EPSS 0.6%