Oracle Http Server Schwachstellen

Zeitverlauf

Vergangenes Jahr

Version

12.2.1.4.040
12.2.1.3.025
11.1.1.7.023
12.1.2.015
11.1.1.9.013

Massnahmen

Official Fix108
Temporary Fix0
Workaround1
Unavailable0
Not Defined6

Ausnutzbarkeit

High4
Functional0
Proof-of-Concept25
Unproven8
Not Defined78

Zugriffsart

Not Defined0
Physical0
Local10
Adjacent0
Network105

Authentisierung

Not Defined0
High1
Low10
None104

Benutzeraktivität

Not Defined0
Required19
None96

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤10
≤20
≤30
≤48
≤510
≤644
≤710
≤823
≤94
≤1016

CVSSv3 Temp

≤10
≤20
≤31
≤410
≤523
≤631
≤716
≤815
≤98
≤1011

VulDB

≤10
≤20
≤30
≤49
≤59
≤644
≤711
≤823
≤93
≤1016

NVD

≤10
≤20
≤30
≤42
≤50
≤610
≤77
≤814
≤94
≤1013

CNA

≤10
≤20
≤30
≤41
≤50
≤62
≤71
≤82
≤90
≤101

Hersteller

≤10
≤20
≤30
≤41
≤50
≤66
≤72
≤84
≤91
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k1
<10k47
<25k45
<50k9
<100k10
≥100k3

Exploit heute

<1k84
<2k10
<5k8
<10k1
<25k11
<50k1
<100k0
≥100k0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (18): 1.3.22, 2.1, 2.2.9, 9.2.0.7, 9.2.0.8, 10.1.3.5, 11.1.1.5, 11.1.1.6, 11.1.1.7, 11.1.1.9, 11.1.2.1, 12.1.2, 12.1.3, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 12.2.1.5

Link to Product Website: https://www.oracle.com

Softwaretyp: Web Server

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
16.01.20245.35.2Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-3817
16.01.20249.89.6Oracle HTTP Server Third Party Pufferüberlauf$25k-$100k$5k-$25kNot DefinedOfficial Fix0.04CVE-2023-38545
17.10.20235.35.2Oracle HTTP Server SSL Module erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-37436
17.10.20236.56.3Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-28484
17.10.20236.56.2Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2650
17.10.20237.57.3Oracle HTTP Server Web Listener Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-22019
18.07.20237.57.3Oracle HTTP Server Thirdparty Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-43680
18.07.20239.18.9Oracle HTTP Server SSL Module schwache Verschlüsselung$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-23914
18.07.20239.89.6Oracle HTTP Server SSL Module erweiterte Rechte$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-25690
18.04.20237.57.3Oracle HTTP Server SSL Module Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-43551
18.04.20237.57.3Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34798
18.04.20237.87.6Oracle HTTP Server SSL Module XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-40304
18.04.20239.89.6Oracle HTTP Server SSL Module Pufferüberlauf$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-37434
17.01.20236.56.3Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-29824
17.01.20237.57.3Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-42717
17.01.20237.57.3Oracle HTTP Server SSL Module schwache Authentisierung$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-27782
17.01.20237.57.3Oracle HTTP Server Centralized Thirdparty Jars Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-25032
17.01.20239.89.6Oracle HTTP Server SSL Module Pufferüberlauf$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-2274
17.01.20239.89.6Oracle HTTP Server SSL Module schwache Authentisierung$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2022-31813
17.01.20239.89.6Oracle HTTP Server Centralized Thirdparty Jars Information Disclosure$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2022-25236
19.10.20225.35.2Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14155
19.10.20225.95.8Oracle HTTP Server SSL Module Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-3537
19.10.20226.56.3Oracle HTTP Server Web Listener Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-24977
19.10.20227.16.9Oracle HTTP Server OHS Config MBeans unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-21593
19.10.20229.89.6Oracle HTTP Server SSL Module Pufferüberlauf$100k und mehr$25k-$100kNot DefinedOfficial Fix0.03CVE-2022-23943

90 weitere Einträge werden nicht mehr angezeigt

weitere Einträge von Oracle

Want to stay up to date on a daily basis?

Enable the mail alert feature now!