Oracle E-business Suite Vulnerabilità

Sequenza temporale

Versione

12.1.3	284
12.2.3	203
12.2.4	202
12.1.2	197
12.1.1	194

Contromisure

Official Fix	348
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	135

Sfruttabilità

High	1
Functional	0
Proof-of-Concept	74
Unproven	32
Not Defined	376

Accesso al vettore

Not Defined	0
Physical	2
Local	25
Adjacent	1
Network	455

Autenticazione

Not Defined	0
High	11
Low	79
None	393

Interazione dell'utente

Not Defined	0
Required	124
None	359

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	21
≤5	43
≤6	155
≤7	69
≤8	120
≤9	37
≤10	36

CVSSv3 Temp

≤1	0
≤2	0
≤3	4
≤4	27
≤5	63
≤6	137
≤7	142
≤8	62
≤9	28
≤10	20

VulDB

≤1	0
≤2	0
≤3	2
≤4	21
≤5	42
≤6	159
≤7	154
≤8	32
≤9	37
≤10	36

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	10
≤6	22
≤7	13
≤8	8
≤9	121
≤10	11

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	0
≤8	1
≤9	0
≤10	1

Fornitore

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	19
≤7	4
≤8	8
≤9	15
≤10	7

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	1
<5k	6
<10k	63
<25k	321
<50k	86
<100k	6
≥100k	0

Exploiter aujourd'hui

<1k	391
<2k	16
<5k	14
<10k	31
<25k	31
<50k	0
<100k	0
≥100k	0

Affected Versions (79): 1.2.1, 2.0, 2.1, 2.2, 3.5, 3.6, 4.3, 6.0.03, 6.1, 6.1.1, 6.2.3, 6.2.4, 7-9, 7.1.1.10.1, 9.2.0.7, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.7, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10.1, 11.5.10.2, 11.5.10cu1, 11.5.10cu2, 11.6, 11i, 11i10cu2, 12, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.01.2003, 12.1, 12.1.1, 12.1.2, 12.1.3, 12.2, 12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8, 12.2.9, 12.2.11, 12.2.12, 12.2.13, 13.4.1, 19.3.2, 22.1, 22.1.1, AMP 12.1.0.4, AMP 13.1.1.1, AMP 121020, AMP 121030, Suite 11.5.10.2

Link to Product Website: https://www.oracle.com

Tipo di software: Supply Chain Management Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
17/04/2024	5.3	5.2	Oracle E-Business Suite Technology Stack Templates rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2024-20990
17/04/2024	8.1	8.0	Oracle E-Business Suite Workflow Privilege Escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2024-21071
19/10/2022	9.8	9.6	Oracle Application Management Pack for E-Business Suite EBS EM Plugin sql injection	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-23305
19/07/2022	9.8	9.6	Oracle E-Business Suite Information Discovery Packaging issues sql injection	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-23305
20/05/2022	6.4	6.3	Oracle E-Business Suite Manage Proxies autenticazione debole	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-21500
19/04/2022	6.6	6.4	Oracle E-Business Suite Information Discovery Logging escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-44832
19/04/2022	9.8	9.6	Oracle E-Business Suite Cloud Manager and Cloud Backup Module Logging sql injection	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-23305
21/04/2021	7.3	7.0	Oracle Agile Product Lifecycle Management Integration Pack for E-Business Suite Installer escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-10086
21/04/2021	6.1	5.8	Oracle E-Business Suite Technology Stack Attachments/iRecruitment/Contracts (AntiSamy) cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-14735
19/01/2021	7.5	7.3	Oracle Agile Product Lifecycle Management Integration Pack for E-Business Suite Installation Issues XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-25649
20/10/2020	9.1	8.7	Oracle E-Business Suite Secure Enterprise Search Search Integration Engine vulnerabilità sconosciuta	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14805
16/07/2019	3.7	3.6	Oracle E-Business Suite jackson-databind escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2761
16/07/2019	5.3	5.1	Oracle E-Business Suite jackson-databind escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2809
16/07/2019	5.8	5.6	Oracle E-Business Suite Jackson-databind escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-2783
16/07/2019	5.8	5.6	Oracle E-Business Suite jackson-databind escalazione di privilegi	$5k-$25k	Calcolo	Not Defined	Official Fix	0.00	CVE-2019-2773
16/07/2019	6.5	6.2	Oracle E-Business Suite OpenSSL escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-2825
16/07/2019	8.2	7.8	Oracle E-Business Suite OpenSSL escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2672
16/07/2019	8.2	7.8	Oracle E-Business Suite Apache ActiveMQ escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2668
16/07/2019	8.2	7.8	Oracle E-Business Suite Apache ActiveMQ escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2666
16/07/2019	8.2	7.8	Oracle E-Business Suite Bouncy Castle Java Library escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2829
16/07/2019	8.2	7.8	Oracle E-Business Suite Apache HTTP Server escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2837
16/07/2019	8.2	7.9	Oracle E-Business Suite Apache CXF escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-2782
16/07/2019	9.1	8.7	Oracle E-Business Suite Apache Commons FileUpload escalazione di privilegi	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2019-2775
16/07/2019	9.6	9.2	Oracle E-Business Suite cURL escalazione di privilegi	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2019-2828
16/10/2018	4.3	4.2	Oracle E-Business Suite Oracle Applications Framework escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-2971