CVE-2022-21551 | Oracle GoldenGate Privilege Escalation

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

1	31
0	19

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_cna_basescore	1
source_cve_cna	1
vulnerability_cvss3_cna_a	1
vulnerability_cvss3_cna_i	1

vulnerability_cvss3_meta_tempscore

vulnerability_cvss3_cna_basescore

source_cve_cna

vulnerability_cvss3_cna_a

vulnerability_cvss3_cna_i

90%	29
70%	11
50%	10

90%

70%

50%

90%	29
70%	11
80%	10

90%

70%

80%

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12823356	08/06/2022	VulD...	cvss3_cna_basescore	6.8	see CVSS documentation	08/06/2022	accepted	90
12823355	08/06/2022	VulD...	cvss3_meta_tempscore	6.6	see CVSS documentation	08/06/2022	accepted	90
12823354	08/06/2022	VulD...	cve_cna	Oracle	nvd.nist.gov	08/06/2022	accepted	70
12823353	08/06/2022	VulD...	cvss3_cna_a	H	nvd.nist.gov	08/06/2022	accepted	70
12823352	08/06/2022	VulD...	cvss3_cna_i	H	nvd.nist.gov	08/06/2022	accepted	70
12823351	08/06/2022	VulD...	cvss3_cna_c	H	nvd.nist.gov	08/06/2022	accepted	70
12823350	08/06/2022	VulD...	cvss3_cna_s	U	nvd.nist.gov	08/06/2022	accepted	70
12823349	08/06/2022	VulD...	cvss3_cna_ui	R	nvd.nist.gov	08/06/2022	accepted	70
12823348	08/06/2022	VulD...	cvss3_cna_pr	H	nvd.nist.gov	08/06/2022	accepted	70
12823347	08/06/2022	VulD...	cvss3_cna_ac	L	nvd.nist.gov	08/06/2022	accepted	70
12823346	08/06/2022	VulD...	cvss3_cna_av	N	nvd.nist.gov	08/06/2022	accepted	70
12823345	08/06/2022	VulD...	cve_nvd_summary	Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate). The supported version that is affected is 21c: prior to 21.7.0.0.0; 19c: prior to 19.1.0.0.220719. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. CVSS 3.1 Base Score 6.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).	cve.mitre.org	08/06/2022	accepted	70
12823344	08/06/2022	VulD...	cve_assigned	1636930800 (11/15/2021)	cve.mitre.org	08/06/2022	accepted	70
12741567	07/20/2022	VulD...	price_0day	$5k-$25k	see exploit price documentation	07/20/2022	accepted	90
12741566	07/20/2022	VulD...	cvss3_meta_tempscore	6.5	see CVSS documentation	07/20/2022	accepted	90
12741565	07/20/2022	VulD...	cvss3_meta_basescore	6.8	see CVSS documentation	07/20/2022	accepted	90
12741564	07/20/2022	VulD...	cvss3_vuldb_tempscore	6.5	see CVSS documentation	07/20/2022	accepted	90
12741563	07/20/2022	VulD...	cvss3_vuldb_basescore	6.8	see CVSS documentation	07/20/2022	accepted	90
12741562	07/20/2022	VulD...	cvss2_vuldb_tempscore	7.2	see CVSS documentation	07/20/2022	accepted	90
12741561	07/20/2022	VulD...	cvss2_vuldb_basescore	8.3	see CVSS documentation	07/20/2022	accepted	90

Commited

User

Field

Change

Remarks

Accepted

Reason

Oracle GoldenGate Privilege Escalation

🔒 Login Required

Are you interested in using VulDB?