CVE-2021-22118: Netapp Hci

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.

Affected products

Netapp Hci: affected versions not specified
Netapp Management Services For Element Software: affected versions not specified
Oracle Commerce Guided Search: version 11.3.2 only
Oracle Communications Brm - Elastic Charging Engine: version 12.0.0.3 only
Oracle Communications Cloud Native Core Binding Support Function: version 1.9.0 only
Oracle Communications Cloud Native Core Policy: version 1.14.0 only
Oracle Communications Cloud Native Core Security Edge Protection Proxy: version 1.6.0 only
Oracle Communications Cloud Native Core Service Communication Proxy: version 1.14.0 only
Oracle Communications Cloud Native Core Unified Data Repository: version 1.14.0 only
Oracle Communications Diameter Intelligence Hub: from 8.0.0, up to and including 8.1.0; from 8.2.0, up to and including 8.2.3
Oracle Communications Element Manager: from 8.2.0, up to and including 8.2.4.0
Oracle Communications Interactive Session Recorder: version 6.4 only
Oracle Communications Network Integrity: version 7.3.6 only
Oracle Communications Session Report Manager: from 8.0.0, up to and including 8.2.4.0
Oracle Communications Session Route Manager: from 8.0.0, up to and including 8.2.4.0
Oracle Communications Unified Inventory Management: version 7.4.1 only; version 7.4.2 only; version 7.5.0 only
Oracle Documaker: from 12.6.0, up to and including 12.6.4
Oracle Enterprise Data Quality: version 12.2.1.3.0 only; version 12.2.1.4.0 only
Oracle Financial Services Analytical Applications Infrastructure: from 8.0.8, up to and including 8.1.1
Oracle Healthcare Data Repository: version 8.1.0 only
Oracle Insurance Policy Administration: from 11.0, up to and including 11.3.1
Oracle Insurance Rules Palette: version 11.0.2 only; version 11.1.0 only; version 11.2.7 only; version 11.3.0 only; version 11.3.1 only
Oracle MySQL Enterprise Monitor: up to and including 8.0.25
Oracle Retail Assortment Planning: version 16.0 only
Oracle Retail Customer Management And Segmentation Foundation: from 16.0, up to and including 19.0
and 7 more

Published 2021-05-27. Last modified 2026-06-17.