Oracle Converged Application Server Vulnérabilités

Chronologie

Version

7.0.0	4
6.2	3
6.1	3
6.2.0	1
7.1.0	1

Contre-mesures

Official Fix	13
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Exploitabilité

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	12

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	13

Authentification

Not Defined	0
High	0
Low	1
None	12

Interaction de l'utilisateur

Not Defined	0
Required	1
None	12

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	2
≤8	2
≤9	2
≤10	5

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	2
≤7	1
≤8	3
≤9	1
≤10	5

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	1
≤8	3
≤9	2
≤10	5

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	1
≤8	2
≤9	2
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	0
≤8	1
≤9	0
≤10	1

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	1
≤9	2
≤10	4

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	0
<2k	0
<5k	0
<10k	2
<25k	6
<50k	0
<100k	4
≥100k	1

Exploiter aujourd'hui

<1k	5
<2k	3
<5k	0
<10k	1
<25k	4
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (8): 5.1, 6.0, 6.1, 6.2, 7, 7.0, 7.1, 8

Link to Product Website: https://www.oracle.com

Type de logiciel: Cloud Software

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
18/07/2023	7.0	6.9	Oracle Communications Converged Application Server - Service Controller Third Party dénie de service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-1436
17/01/2023	9.8	9.6	Oracle Communications Converged Application Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2023-21890
19/10/2022	7.5	7.3	Oracle Communications Converged Application Server-Service Controller Platform dénie de service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-28165
19/10/2021	5.3	5.2	Oracle Communications Converged Application Server - Service Controller Apache Commons IO divulgation de l'information	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-29425
21/04/2021	4.8	4.6	Oracle Communications Converged Application Server SC Admin server vulnérabilité inconnue	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-27218
15/04/2020	9.8	9.4	Oracle Communications Converged Application Server Service Controller Admin Console elévation de privilèges	$100k et plus	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2015-3253
16/07/2019	9.8	9.7	Oracle Converged Application Server - Service Controller (Spring Framework elévation de privilèges	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2018-1275
16/07/2019	9.8	9.7	Oracle Converged Application Server WebLogic Server elévation de privilèges	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2019-2729
16/01/2019	6.1	6.0	Oracle Communications Converged Application Server OpenSSL cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2015-9251
16/01/2019	7.5	7.4	Oracle Communications Converged Application Server Bouncy Castle chiffrement faible	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-1000180

3 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

plus d'entrées par Oracle

◂ PrécédentAperçuSuivant ▸

Do you know our Splunk app?

Download it now for free!