CVE-2021-2480 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).

What is CVE-2021-2480?

CVE-2021-2480 is a low-severity vulnerability in Oracle Http Server, published on 20 Oct 2021.

Official description

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Which versions are affected by CVE-2021-2480?

It affects 1 product.

Products include Oracle Http Server.

How do I fix CVE-2021-2480?

No fix has been published for CVE-2021-2480 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-2480 being exploited?

There is no known exploitation of CVE-2021-2480 in the wild and no public exploit code.

Other vulnerabilities in Oracle Http Server

• CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Exploited Critical 10.0
• CVE-2026-60365 Missing authorization in Oracle HTTP Server Critical 10.0
• CVE-2006-5347 Other in n/a Critical 10.0
• CVE-2006-5349 Other in n/a Critical 10.0
• CVE-1999-1125 Privilege escalation in n/a Critical 10.0

All Oracle Http Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-34j9-6q3m-7mrr.