Oracle Graalvm Enterprise Edition Vulnerabilidad

Cronología

Versión

19.3.1	5
20.0.0	5
19.3.0.2	5
21.3.3	4
19.3.2	4

Contramedidas

Official Fix	38
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	38

Vector de acceso

Not Defined	0
Physical	0
Local	4
Adjacent	0
Network	34

Autenticación

Not Defined	0
High	1
Low	7
None	30

La interacción del usuario

Not Defined	0
Required	5
None	33

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	6
≤7	5
≤8	14
≤9	4
≤10	5

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	7
≤7	6
≤8	16
≤9	2
≤10	3

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	6
≤7	5
≤8	13
≤9	5
≤10	5

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	3
≤7	4
≤8	11
≤9	4
≤10	5

CNA

≤1	0
≤2	0
≤3	0
≤4	3
≤5	0
≤6	1
≤7	0
≤8	5
≤9	1
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	1
≤7	3
≤8	6
≤9	4
≤10	3

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	2
<10k	15
<25k	14
<50k	2
<100k	5
≥100k	0

Explotar hoy

<1k	22
<2k	8
<5k	3
<10k	0
<25k	5
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (42): 2, 19, 19.2, 19.3.0.2, 19.3.1, 19.3.2, 19.3.3, 19.3.4, 19.3.5, 20.1, 20.2, 20.3, 20.3.1.2, 20.3.2, 20.3.3, 20.3.4, 20.3.5, 20.3.6, 20.3.7, 20.3.8, 20.3.9, 21.0.0.2, 21.0.1; Oracle GraalVM Enterprise Edition 20.3.12, 21.1, 21.2, 21.3, 21.3.1, 21.3.2, 21.3.3, 21.3.4, 21.3.5, 21.3.6, 21.3.8, 22.0.0.2, 22.1, 22.2, 22.3, 22.3.1, 22.3.2, 22.3.4, Oracle GraalVM for JDK 17.0.9, Oracle GraalVM for JDK 17.0.9; Oracle GraalVM Enterprise Edition 21.3.8

Link to Product Website: https://www.oracle.com

Tipo de software: Programming Tool Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-16	3.7	3.6	Oracle GraalVM for JDK/GraalVM Enterprise Edition Compiler divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-20955
2024-01-16	7.5	7.3	Oracle GraalVM for JDK/GraalVM Enterprise Edition Tools denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-5072
2023-07-18	3.7	3.6	Oracle GraalVM Enterprise Edition GraalVM Compiler divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22051
2023-04-18	5.7	5.5	Oracle GraalVM Enterprise Edition Native Image vulnerabilidad desconocida	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-21986
2023-01-17	8.1	7.7	Oracle GraalVM Enterprise Edition Node escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-43548
2022-10-19	5.3	5.1	Oracle GraalVM Enterprise Edition JavaScript divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-21597
2022-10-19	7.5	7.3	Oracle GraalVM Enterprise Edition LLVM Interpreter denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-21634
2022-10-19	9.1	8.9	Oracle GraalVM Enterprise Edition Node escalada de privilegios	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-32215
2022-07-19	7.1	7.0	Oracle GraalVM Enterprise Edition Native Image denegación de servicio	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-25647
2022-04-19	7.5	7.3	Oracle GraalVM Enterprise Edition Node denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-0778

28 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 28 results.

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!