Oracle Weblogic Schwachstellen

Zeitverlauf

Vergangenes Jahr

Version

12.2.1.4.0180
12.2.1.3.0163
14.1.1.0.0160
12.1.3.0.0106
10.3.6.0.090

Massnahmen

Official Fix347
Temporary Fix0
Workaround1
Unavailable0
Not Defined4

Ausnutzbarkeit

High11
Functional0
Proof-of-Concept16
Unproven15
Not Defined310

Zugriffsart

Not Defined0
Physical0
Local21
Adjacent0
Network331

Authentisierung

Not Defined0
High26
Low35
None291

Benutzeraktivität

Not Defined0
Required68
None284

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤10
≤20
≤31
≤45
≤525
≤658
≤775
≤890
≤918
≤1080

CVSSv3 Temp

≤10
≤20
≤31
≤46
≤535
≤685
≤763
≤871
≤916
≤1075

VulDB

≤10
≤20
≤31
≤45
≤526
≤661
≤770
≤891
≤917
≤1081

NVD

≤10
≤20
≤30
≤42
≤520
≤626
≤744
≤844
≤911
≤1059

CNA

≤10
≤20
≤30
≤41
≤56
≤69
≤723
≤826
≤92
≤1010

Hersteller

≤10
≤20
≤30
≤40
≤517
≤615
≤723
≤822
≤910
≤1037

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k10
<10k78
<25k178
<50k21
<100k38
≥100k27

Exploit heute

<1k213
<2k44
<5k32
<10k13
<25k49
<50k1
<100k0
≥100k0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (40): 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 8.0, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 9.2, 9.2.1, 9.2.2, 9.2.3, 10.0.1, 10.0.2, 10.2.1, 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.5, 10.3.6, 11.1.1.9, 12.1.1, 12.1.2, 12.1.3, 12.2.1, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 14.1.1

Link to Product Website: https://www.oracle.com

Softwaretyp: Application Server Software

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
17.04.20246.46.3Oracle WebLogic Server Core Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-21007
17.04.20246.46.3Oracle WebLogic Server Core Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2024-21006
16.01.20245.55.4Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-42503
16.01.20246.15.8Oracle WebLogic Server Core unbekannte Schwachstelle$5k-$25k$5k-$25kNot DefinedOfficial Fix0.02CVE-2024-20986
16.01.20246.15.9Oracle WebLogic Server Centralized Thirdparty Jars Cross Site Scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-43643
16.01.20246.56.3Oracle WebLogic Server Centralized Thirdparty Jars Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-44483
16.01.20247.57.2Oracle WebLogic Server Core Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-20931
16.01.20248.68.2Oracle WebLogic Server Core unbekannte Schwachstelle$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2024-20927
16.01.20249.19.0Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-49093
17.10.20234.74.6Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-35116
17.10.20235.35.2Oracle WebLogic Server Centralized Thirdparty Jars unbekannte Schwachstelle$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-13956
17.10.20235.55.4Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36374
17.10.20237.16.8Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2976
17.10.20237.16.9Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-44729
17.10.20237.57.3Oracle WebLogic Server Core Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-22108
17.10.20237.57.3Oracle WebLogic Server Core Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-22086
17.10.20237.37.2Oracle WebLogic Server Centralized Thirdparty Jars schwache Authentisierung$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-23491
17.10.20237.57.3Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-29546
17.10.20238.17.9Oracle WebLogic Server Core Remote Code Execution$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-22101
17.10.20239.89.6Oracle WebLogic Server Core Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.13CVE-2023-22089
17.10.20239.89.6Oracle WebLogic Server Core Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-22072
17.10.20239.89.6Oracle WebLogic Server Core Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-22069
17.10.20239.89.6Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2022-29599
17.10.20239.89.6Oracle WebLogic Server Core Pufferüberlauf$25k-$100k$25k-$100kNot DefinedOfficial Fix0.04CVE-2022-42920
18.07.20233.33.2Oracle WebLogic Server Centralized Thirdparty Jars Information Disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-8908

327 weitere Einträge werden nicht mehr angezeigt

weitere Einträge von Oracle

Do you know our Splunk app?

Download it now for free!