Oracle Weblogic Server Schwachstellen

Zeitverlauf

Vergangenes Jahr

Version

12.2.1.4.0	180
12.2.1.3.0	163
14.1.1.0.0	160
12.1.3.0.0	106
10.3.6.0.0	89

Massnahmen

Official Fix	340
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	3

Ausnutzbarkeit

High	7
Functional	0
Proof-of-Concept	12
Unproven	15
Not Defined	310

Zugriffsart

Not Defined	0
Physical	0
Local	19
Adjacent	0
Network	325

Authentisierung

Not Defined	0
High	26
Low	33
None	285

Benutzeraktivität

Not Defined	0
Required	68
None	276

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	5
≤5	25
≤6	54
≤7	75
≤8	88
≤9	18
≤10	78

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	6
≤5	33
≤6	83
≤7	61
≤8	71
≤9	14
≤10	75

VulDB

≤1	0
≤2	0
≤3	1
≤4	5
≤5	26
≤6	57
≤7	70
≤8	89
≤9	16
≤10	80

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	20
≤6	26
≤7	44
≤8	44
≤9	11
≤10	58

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	9
≤7	23
≤8	26
≤9	2
≤10	10

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	17
≤6	15
≤7	23
≤8	22
≤9	9
≤10	37

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	10
<10k	77
<25k	172
<50k	21
<100k	37
≥100k	27

Exploit heute

<1k	205
<2k	46
<5k	30
<10k	14
<25k	47
<50k	2
<100k	0
≥100k	0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (15): 9.2, 10.0.2, 10.3.2, 10.3.5, 10.3.6, 11.1.1.9, 12.1.1, 12.1.2, 12.1.3, 12.2.1, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 14.1.1

Link to Product Website: https://www.oracle.com

Softwaretyp: Application Server Software

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
17.04.2024	6.4	6.3	Oracle WebLogic Server Core Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.08	CVE-2024-21007
17.04.2024	6.4	6.3	Oracle WebLogic Server Core Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.30	CVE-2024-21006
16.01.2024	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-42503
16.01.2024	6.1	5.8	Oracle WebLogic Server Core unbekannte Schwachstelle	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2024-20986
16.01.2024	6.1	5.9	Oracle WebLogic Server Centralized Thirdparty Jars Cross Site Scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-43643
16.01.2024	6.5	6.3	Oracle WebLogic Server Centralized Thirdparty Jars Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-44483
16.01.2024	7.5	7.2	Oracle WebLogic Server Core Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-20931
16.01.2024	8.6	8.2	Oracle WebLogic Server Core unbekannte Schwachstelle	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2024-20927
16.01.2024	9.1	9.0	Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2023-49093
17.10.2023	4.7	4.6	Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-35116
17.10.2023	5.3	5.2	Oracle WebLogic Server Centralized Thirdparty Jars unbekannte Schwachstelle	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-13956
17.10.2023	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-36374
17.10.2023	7.1	6.8	Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-2976
17.10.2023	7.1	6.9	Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-44729
17.10.2023	7.5	7.3	Oracle WebLogic Server Core Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-22108
17.10.2023	7.5	7.3	Oracle WebLogic Server Core Information Disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22086
17.10.2023	7.3	7.2	Oracle WebLogic Server Centralized Thirdparty Jars schwache Authentisierung	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-23491
17.10.2023	7.5	7.3	Oracle WebLogic Server Centralized Thirdparty Jars Denial of Service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-29546
17.10.2023	8.1	7.9	Oracle WebLogic Server Core Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22101
17.10.2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.01	CVE-2023-22089
17.10.2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22072
17.10.2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22069
17.10.2023	9.8	9.6	Oracle WebLogic Server Centralized Thirdparty Jars erweiterte Rechte	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.03	CVE-2022-29599
17.10.2023	9.8	9.6	Oracle WebLogic Server Core Pufferüberlauf	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.04	CVE-2022-42920
18.07.2023	3.3	3.2	Oracle WebLogic Server Centralized Thirdparty Jars Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8908

319 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 319 results.

weitere Einträge von Oracle

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!