Oracle Converged Application Server - Service Controller Vulnerabilidad

Cronología

Versión

6.2.01
6.21
6.01
6.11

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined3

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network3

Autenticación

Not Defined0
High0
Low0
None3

La interacción del usuario

Not Defined0
Required0
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤80
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤80
≤90
≤101

VulDB

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k0
<10k1
<25k1
<50k0
<100k1
≥100k0

Explotar hoy

<1k1
<2k1
<5k0
<10k1
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (3): 6.0, 6.1, 6.2

Link to Product Website: https://www.oracle.com

Tipo de software: Cloud Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-07-187.06.9Oracle Communications Converged Application Server - Service Controller Third Party denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1436
2021-10-195.35.2Oracle Communications Converged Application Server - Service Controller Apache Commons IO divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29425
2019-07-169.89.7Oracle Converged Application Server - Service Controller (Spring Framework escalada de privilegios$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2018-1275

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!