Oracle Discovery Vulnérabilités

Chronologie

Version

3.2.014
3.110
2.2.28
2.38
2.48

Contre-mesures

Official Fix44
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Exploitabilité

High2
Functional0
Proof-of-Concept0
Unproven0
Not Defined48

Vecteur d'accès

Not Defined0
Physical0
Local4
Adjacent2
Network44

Authentification

Not Defined0
High0
Low6
None44

Interaction de l'utilisateur

Not Defined0
Required8
None42

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤612
≤76
≤814
≤92
≤1016

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤618
≤72
≤814
≤90
≤1016

VulDB

≤10
≤20
≤30
≤40
≤50
≤614
≤74
≤814
≤90
≤1018

NVD

≤10
≤20
≤30
≤40
≤50
≤610
≤78
≤88
≤90
≤1016

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤612
≤74
≤86
≤90
≤1010

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k2
<10k4
<25k26
<50k8
<100k10
≥100k0

Exploiter aujourd'hui

<1k26
<2k2
<5k10
<10k2
<25k10
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (31): 1.1.1, 1.1.3, 1.2, 1.6, 2.2.2, 2.3, 2.4, 3.0, 3.1, 3.2, 7-9, 7.6.1, 7.7, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 12.0, 12.1, 12.2, 12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8, 12.2.9, 12.2.11, 36559

Link to Product Website: https://www.oracle.com

Type de logiciel: Supply Chain Management Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
19/07/20229.89.6Oracle E-Business Suite Information Discovery Packaging issues sql injection$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-23305
19/04/20226.66.4Oracle E-Business Suite Information Discovery Logging elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-44832
21/04/20217.57.2Oracle Endeca Information Discovery Studio vulnérabilité inconnue$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11979
21/04/20218.88.4Oracle Endeca Information Discovery Studio elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-26217
20/01/20217.37.0Oracle Endeca Information Discovery Integrator Integrator ETL elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10086
20/01/20217.77.3Oracle Endeca Information Discovery Integrator Integrator ETL Privilege Escalation$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-5421
20/10/20209.89.4Oracle Endeca Information Discovery Studio Endeca Server elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10173
20/10/20209.89.4Oracle Endeca Information Discovery Integrator Integrator ETL XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-10683
20/10/20203.73.6Oracle Financial Services Price Creation and Discovery User Interface divulgation de l'information$5k-$25kCalculateurNot DefinedOfficial Fix0.00CVE-2020-9488
20/10/20206.15.8Oracle Financial Services Price Creation and Discovery User Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11022

39 plus d'entrées ne sont pas affichées

plus d'entrées par Oracle

Do you need the next level of professionalism?

Upgrade your account now!