CVE-2021-2322

State: Published
Severity: 8.8 High
Published: Jun 23, 2021
Updated: Sep 26, 2024
Reserved: Dec 9, 2020

Description

Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	oracle

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
OpenGrokOracle Corporation	1.6.7 and priorAffected

References

https://www.oracle.com/security-alerts/oracle-open-source-cves-outside-other-oracle-public-documents.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.