Apache Any23 الثغرات

التسلسل الزمني

النسخة

2.04
2.14
2.24
2.34
2.44

معالجة

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined4

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent3
Network1

توثيق

Not Defined0
High0
Low4
None0

تفاعل المستخدم

Not Defined0
Required0
None4

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤63
≤71
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤41
≤50
≤62
≤71
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k0
<2k0
<5k0
<10k3
<25k1
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k3
<2k0
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Versions (8): 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7

Link to Product Website: https://www.apache.org/

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
04/07/20235.15.1Apache Any23 TikaEncodingDetector الحرمان من الخدمة$5k-$25k$0-$5kNot DefinedNot Defined0.04CVE-2023-34150
05/03/20225.55.3Apache Any23 RDFa XSLTStylesheet Extractor XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-25312
11/09/20215.55.3Apache Any23 StreamUtils.java XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-38555
11/09/20216.36.0Apache Any23 YAMLExtractor.java Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-40146

المزيد من الادخالات بحسب Apache

التالي ▸نظرة عامة◂ السابق

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!