Oracle Jdeveloper Vulnerabilidad

Cronología

Versión

12.1.3.0.012
12.2.1.3.011
12.2.1.4.010
11.1.1.9.010
11.1.2.4.07

Contramedidas

Official Fix30
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Explotabilidad

High1
Functional0
Proof-of-Concept4
Unproven1
Not Defined26

Vector de acceso

Not Defined0
Physical0
Local6
Adjacent1
Network25

Autenticación

Not Defined0
High3
Low2
None27

La interacción del usuario

Not Defined0
Required9
None23

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤31
≤43
≤54
≤64
≤76
≤84
≤92
≤108

CVSSv3 Temp

≤10
≤20
≤31
≤45
≤52
≤67
≤73
≤85
≤91
≤108

VulDB

≤10
≤20
≤31
≤43
≤54
≤64
≤75
≤85
≤92
≤108

NVD

≤10
≤20
≤31
≤40
≤51
≤62
≤74
≤82
≤91
≤107

CNA

≤10
≤20
≤31
≤40
≤50
≤61
≤70
≤80
≤90
≤102

Proveedor

≤10
≤20
≤31
≤40
≤51
≤61
≤72
≤81
≤92
≤104

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k3
<10k8
<25k13
<50k0
<100k6
≥100k2

Explotar hoy

<1k21
<2k2
<5k1
<10k2
<25k6
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (19): 9.0.4, 9.0.5, 10.1.2, 10.1.2.2, 10.1.2.3, 10.1.3.5, 11.1.1.2.4, 11.1.1.7, 11.1.1.7.1, 11.1.1.9, 11.1.2.3, 11.1.2.4, 12.1.2, 12.1.3, 12.2.1, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4

Link to Product Website: https://www.oracle.com

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-01-166.66.5Oracle JDeveloper ADF Faces escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-2976
2024-01-167.57.2Oracle JDeveloper denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-36090
2023-07-189.89.6Oracle JDeveloper ADF Faces escalada de privilegios$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2021-42575
2023-04-187.57.2Oracle JDeveloper ADF Faces divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-14371
2022-04-196.66.4Oracle JDeveloper escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-44832
2022-04-199.89.6Oracle JDeveloper sql injection$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-23305
2022-04-199.89.7Oracle JDeveloper ADF Faces Remote Code Execution$100k y más$5k-$25kNot DefinedOfficial Fix0.03CVE-2022-21445
2021-07-205.55.3Oracle JDeveloper and ADF Apache POI divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-12415
2021-07-207.57.2Oracle JDeveloper Apache Commons Compress denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-12402
2021-07-209.89.4Oracle JDeveloper dom4j XML External Entity$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2020-10683

22 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

más entradas por Oracle

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!