Oracle Jd Edwards Enterpriseone Tools Schwachstellen

Zeitverlauf

Vergangenes Jahr

Version

9.240
9.2.222
9.2.020
9.2.120
9.2.320

Massnahmen

Official Fix128
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Ausnutzbarkeit

High2
Functional0
Proof-of-Concept1
Unproven2
Not Defined123

Zugriffsart

Not Defined0
Physical0
Local7
Adjacent0
Network121

Authentisierung

Not Defined0
High3
Low22
None103

Benutzeraktivität

Not Defined0
Required36
None92

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤10
≤20
≤32
≤42
≤512
≤615
≤736
≤826
≤99
≤1026

CVSSv3 Temp

≤10
≤20
≤32
≤42
≤513
≤636
≤717
≤828
≤94
≤1026

VulDB

≤10
≤20
≤32
≤42
≤512
≤616
≤733
≤823
≤913
≤1027

NVD

≤10
≤20
≤30
≤42
≤52
≤612
≤728
≤822
≤95
≤1028

CNA

≤10
≤20
≤31
≤40
≤52
≤62
≤75
≤82
≤93
≤100

Hersteller

≤10
≤20
≤30
≤42
≤52
≤63
≤715
≤84
≤96
≤1015

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k2
<10k32
<25k62
<50k5
<100k22
≥100k5

Exploit heute

<1k70
<2k17
<5k14
<10k3
<25k20
<50k4
<100k0
≥100k0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (24): 4.0.1, 8.98, 8.98 SP 24, 9.1, 9.1.5, 9.2, 9.2.0.5, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.2.5.1, 9.2.5.2, 9.2.5.3, 9.2.6, 9.2.6.1, 9.2.6.2, 9.2.6.3, 9.2.6.4, 9.2.7, 24, Prior to 9.2.8, Prior to 9.2.8.1

Link to Product Website: https://www.oracle.com

Softwaretyp: Enterprise Resource Planning Software

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
16.01.20242.72.6Oracle JD Edwards EnterpriseOne Tools Package Build SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20957
16.01.20242.72.6Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20905
16.01.20244.34.1Oracle JD Edwards EnterpriseOne Tools Monitoring/Diagnostics SEC Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20937
16.01.20246.56.3Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-2650
16.01.20247.57.3Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-3479
16.01.20246.46.3Oracle JD Edwards EnterpriseOne Tools One-Click Provisioning Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-28756
16.01.20249.89.6Oracle JD Edwards EnterpriseOne Tools Interactive Engine SEC Pufferüberlauf$25k-$100k$5k-$25kNot DefinedOfficial Fix0.04CVE-2022-37434
16.01.20249.89.6Oracle JD Edwards EnterpriseOne Tools One-Click Provisioning Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-32002
17.10.20235.35.2Oracle JD Edwards EnterpriseOne Tools Deployment SEC unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-13956
18.07.20236.15.9Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-22055
18.07.20238.17.9Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43548
18.04.20234.34.2Oracle JD Edwards EnterpriseOne Tools Interoperability SEC Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-21927
18.04.20235.45.3Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-21936
18.04.20235.55.4Oracle JD Edwards EnterpriseOne Tools Deployment SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36373
18.04.20235.15.1Oracle JD Edwards EnterpriseOne Tools Business Logic Infra SEC Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-15250
18.04.20236.56.3Oracle JD Edwards EnterpriseOne Tools Interoperability SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41973
18.04.20236.56.3Oracle JD Edwards EnterpriseOne Tools Interoperability SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-30129
18.04.20237.57.3Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-42003
18.04.20238.17.9Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure Pufferüberlauf$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-1311
18.04.20238.28.0Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech - Cloud Manager unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-21824
18.04.20239.89.6Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Pufferüberlauf$25k-$100k$25k-$100kNot DefinedOfficial Fix0.00CVE-2022-2274
18.04.20239.89.6Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech - Cloud Manager Pufferüberlauf$25k-$100k$25k-$100kNot DefinedOfficial Fix0.04CVE-2022-28738
17.01.20235.55.4Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-26336
19.10.20225.45.3Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-21629
19.10.20226.15.9Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-21630

103 weitere Einträge werden nicht mehr angezeigt

weitere Einträge von Oracle

Interested in the pricing of exploits?

See the underground prices here!