Oracle Instantis Enterprisetrack Vulnerabilidad

Cronología

Versión

17.1	32
17.2	32
17.3	30

Contramedidas

Official Fix	32
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	32

Vector de acceso

Not Defined	0
Physical	0
Local	2
Adjacent	2
Network	28

Autenticación

Not Defined	0
High	0
Low	4
None	28

La interacción del usuario

Not Defined	0
Required	8
None	24

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	12
≤9	4
≤10	10

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	14
≤9	4
≤10	8

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	12
≤9	4
≤10	10

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	0
≤8	12
≤9	2
≤10	10

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	2
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	8
≤9	2
≤10	4

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	2
<10k	6
<25k	12
<50k	4
<100k	2
≥100k	6

Explotar hoy

<1k	14
<2k	2
<5k	6
<10k	2
<25k	6
<50k	2
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (5): 8.0.6, 8.5, 17.1, 17.2, 17.3

Link to Product Website: https://www.oracle.com

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2021-10-19	5.3	5.2	Oracle Instantis EnterpriseTrack Apache Tomcat escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2021-33037
2021-10-19	8.3	8.1	Oracle Instantis EnterpriseTrack JDBC Remote Code Execution	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-2351
2021-10-19	9.8	9.6	Oracle Instantis EnterpriseTrack Apache HTTP Server desbordamiento de búfer	$100k y más	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2021-26691
2021-07-20	7.5	7.2	Oracle Instantis EnterpriseTrack Apache Tomcat divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-25122
2021-04-21	6.7	6.4	Oracle Instantis EnterpriseTrack Dashboards/Reports escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2020-11987
2021-04-21	7.5	7.2	Oracle Instantis EnterpriseTrack WebServer divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-17527
2021-04-21	9.8	9.4	Oracle Instantis EnterpriseTrack Browser cross site scripting	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2019-0219
2021-01-20	7.5	7.2	Oracle Instantis EnterpriseTrack Dashboard module escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2019-17566
2021-01-19	5.9	5.8	Oracle Instantis EnterpriseTrack Logging denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45105
2021-01-19	9.8	9.6	Oracle Instantis EnterpriseTrack Core desbordamiento de búfer	$100k y más	$25k-$100k	Not Defined	Official Fix	0.03	CVE-2021-44790

22 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

más entradas por Oracle

◂ AnteriorVisión de conjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!