Oracle Application Express Vulnerabilidad

Cronología

Versión

22.03
22.13
22.22
3.0.12
4.2.3.00.071

Contramedidas

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined8

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network10

Autenticación

Not Defined0
High0
Low6
None4

La interacción del usuario

Not Defined0
Required5
None5

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤64
≤71
≤81
≤92
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤64
≤71
≤81
≤92
≤101

VulDB

≤10
≤20
≤30
≤40
≤51
≤65
≤70
≤81
≤92
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤81
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤72
≤80
≤92
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k1
<10k3
<25k3
<50k1
<100k2
≥100k0

Explotar hoy

<1k5
<2k1
<5k2
<10k0
<25k2
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (12): 1.1-ea, 1.1.1, 1.1.2, 1.1.3, 2.0, 2.1, 2.2, 3.0.1, 4.2.3.00.07, 22.0, 22.1, 22.2

Link to Product Website: https://www.oracle.com

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-07-185.65.5Oracle Application Express Administration None Remote Code Execution$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-21983
2023-07-189.08.8Oracle Application Express Team Calendar Plugin User Account Privilege Escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-21974
2023-07-189.08.8Oracle Application Express Customers Plugin User Account Privilege Escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-21975
2022-07-196.05.9Oracle Application Express User Account cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41184
2022-07-196.66.5Oracle Application Express User Account denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-24729
2015-07-165.45.2Oracle Application Express vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-2655
2012-07-177.57.2Oracle Application Express Listener divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2012-1740
2008-04-169.89.3Oracle Application Express Remote Code Execution$25k-$100k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-1822
2008-04-165.45.1Oracle Application Express run_ddl escalada de privilegios$5k-$25k$0-$5kProof-of-ConceptNot Defined0.00CVE-2008-1811
2006-10-274.34.1Oracle Application Express cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2006-5599

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!