Oracle Performance Management Vulnerabilidad

Cronología

Versión

11.1.2.24
11.1.2.34
13.3.0.04
11.1.2.42
12.1.0.52

Contramedidas

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven2
Not Defined8

Vector de acceso

Not Defined0
Physical0
Local2
Adjacent0
Network8

Autenticación

Not Defined0
High4
Low2
None4

La interacción del usuario

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤64
≤72
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤62
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤52
≤64
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤42
≤50
≤62
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤42
≤50
≤62
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k0
<10k6
<25k4
<50k0
<100k0
≥100k0

Explotar hoy

<1k8
<2k0
<5k0
<10k2
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (12): 11.1.2.2, 11.1.2.3, 11.1.2.4, 12.1.0.5, 12.1.1, 12.1.2, 12.1.3, 13.2, 13.3, 13.4, 13.4.1, 13.5.1

Link to Product Website: https://www.oracle.com

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2021-01-198.38.1Oracle Application Performance Management End User Experience Management Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2351
2020-10-206.56.2Oracle Application Performance Management (APM) Comp Management/Life Cycle Management divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-3740
2020-04-156.05.7Oracle Application Performance Management EM Request Monitoring denegación de servicio$5k-$25kCalculadorNot DefinedOfficial Fix0.00CVE-2020-2946
2019-10-164.03.8Oracle Hyperion Enterprise Performance Management Architect Apache Tomcat divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2941
2019-01-169.19.0Oracle Performance Management cURL escalada de privilegios$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2019-2453
2015-07-164.34.3Oracle Hyperion Enterprise Performance Management Architect vulnerabilidad desconocida$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2015-2592
2015-07-164.34.3Oracle Hyperion Enterprise Performance Management Architect vulnerabilidad desconocida$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2015-2584
2014-07-165.14.5Oracle Hyperion Enterprise Performance Management Architect Data Synchronizer vulnerabilidad desconocida$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2014-4206
2014-07-165.34.6Oracle Hyperion Enterprise Performance Management Architect Property Editing Local Privilege Escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2014-4203

más entradas por Oracle

Want to stay up to date on a daily basis?

Enable the mail alert feature now!