CVE-2021-22987

CRITICAL Year: 2021
CVSS v3 Score
9.9
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in Appliance mode, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Related Vulnerabilities

CVE-2017-10202

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker...

NVD-CWE-Other2017

CVE-2017-10272

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerabil...

NVD-CWE-Other2017

CVE-2017-10352

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12....

NVD-CWE-Other2017

CVE-2017-10396

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). Supported versions that are affected are 2.2.5.0, 2.2.6.0 and 2.2.7...

NVD-CWE-Other2017

CVE-2017-10404

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). Supported versions that are affected are 8.5.1 and 9.0.0. Easily ex...

NVD-CWE-Other2017

CVE-2017-3503

CRITICAL
CVSS:9.9(Critical)

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that ar...

NVD-CWE-Other2017