Oracle Discovery Vulnerabilidad

Versión

3.2.0	12
8.0.7	12
8.0.6	10
3.1	8
8.0.5	6

Contramedidas

Official Fix	46
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	50

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	50

Autenticación

Not Defined	0
High	2
Low	6
None	42

La interacción del usuario

Not Defined	0
Required	8
None	42

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	8
≤7	8
≤8	10
≤9	4
≤10	18

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	14
≤7	6
≤8	8
≤9	2
≤10	18

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	8
≤7	8
≤8	10
≤9	4
≤10	18

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	8
≤7	8
≤8	6
≤9	4
≤10	18

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	4
≤8	4
≤9	4
≤10	8

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	0
<10k	10
<25k	26
<50k	4
<100k	8
≥100k	2

Explotar hoy

<1k	30
<2k	4
<5k	4
<10k	4
<25k	8
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (31): 1.1.1, 1.1.3, 1.2, 1.6, 2.2.2, 2.3, 2.4, 3.0, 3.1, 3.2, 7-9, 7.6.1, 7.7, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 12.0, 12.1, 12.2, 12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8, 12.2.9, 12.2.11, 36559

Link to Product Website: https://www.oracle.com

Tipo de software: Supply Chain Management Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CVE
2022-07-19	9.8	9.6	Oracle E-Business Suite Information Discovery Packaging issues sql injection	$25k-$100k	$5k-$25k	Not Defined	Official Fix	CVE-2022-23305
2022-04-19	6.6	6.4	Oracle E-Business Suite Information Discovery Logging escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2021-44832
2021-04-21	7.5	7.2	Oracle Endeca Information Discovery Studio vulnerabilidad desconocida	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-11979
2021-04-21	8.8	8.4	Oracle Endeca Information Discovery Studio escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-26217
2021-01-20	7.3	7.0	Oracle Endeca Information Discovery Integrator Integrator ETL escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2019-10086
2021-01-20	7.7	7.3	Oracle Endeca Information Discovery Integrator Integrator ETL Privilege Escalation	$25k-$100k	$0-$5k	Not Defined	Official Fix	CVE-2020-5421
2020-10-20	9.8	9.4	Oracle Endeca Information Discovery Studio Endeca Server escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2019-10173
2020-10-20	9.8	9.4	Oracle Endeca Information Discovery Integrator Integrator ETL XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-10683
2020-10-20	3.7	3.6	Oracle Financial Services Price Creation and Discovery User Interface divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-9488
2020-10-20	6.1	5.8	Oracle Financial Services Price Creation and Discovery User Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2020-11022

39 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 39 results.

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!