Oracle Cloud Infrastructure Storage Gateway vulnerabilities

4 CVEs affecting Oracle Cloud Infrastructure Storage Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-2320, published 2021-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-2317, published 2021-04-22. Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily…
CVE-2021-2320, published 2021-04-22. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily…
CVE-2021-2319, published 2021-04-22. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily…
CVE-2021-2318, published 2021-04-22. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily…