Oracle Jd Edwards Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

9.2	52
9.2.2	27
9.2.0	25
9.2.1	25
9.2.3	25

Contromisure

Official Fix	173
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	9

Sfruttabilità

High	3
Functional	0
Proof-of-Concept	5
Unproven	2
Not Defined	172

Accesso al vettore

Not Defined	0
Physical	0
Local	11
Adjacent	0
Network	171

Autenticazione

Not Defined	0
High	3
Low	36
None	143

Interazione dell'utente

Not Defined	0
Required	38
None	144

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	4
≤5	19
≤6	26
≤7	43
≤8	40
≤9	10
≤10	38

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	4
≤5	20
≤6	50
≤7	23
≤8	41
≤9	4
≤10	38

VulDB

≤1	0
≤2	0
≤3	2
≤4	4
≤5	19
≤6	28
≤7	37
≤8	39
≤9	14
≤10	39

NVD

≤1	0
≤2	0
≤3	0
≤4	3
≤5	3
≤6	17
≤7	31
≤8	31
≤9	5
≤10	40

CNA

≤1	0
≤2	0
≤3	1
≤4	1
≤5	3
≤6	4
≤7	5
≤8	2
≤9	4
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	2
≤5	3
≤6	6
≤7	15
≤8	7
≤9	6
≤10	21

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	0
<5k	5
<10k	47
<25k	82
<50k	10
<100k	32
≥100k	6

Exploiter aujourd'hui

<1k	101
<2k	24
<5k	16
<10k	6
<25k	29
<50k	6
<100k	0
≥100k	0

Affected Versions (33): 4.0.1, 8.9, 8.50.07, 8.96.i1, 8.98, 8.98 SP 24, 9.0, 9.1, 9.1.5, 9.2, 9.2.0.5, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.2.5.1, 9.2.5.2, 9.2.5.3, 9.2.6, 9.2.6.1, 9.2.6.2, 9.2.6.3, 9.2.6.4, 9.2.7, 24, A9.1, A9.2, A9.3, A9.3.1, A9.4, Prior to 9.2.8, Prior to 9.2.8.1

Link to Product Website: https://www.oracle.com

Tipo di software: Enterprise Resource Planning Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
16/01/2024	2.7	2.6	Oracle JD Edwards EnterpriseOne Tools Package Build SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-20957
16/01/2024	2.7	2.6	Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-20905
16/01/2024	4.3	4.1	Oracle JD Edwards EnterpriseOne Tools Monitoring/Diagnostics SEC rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-20937
16/01/2024	6.5	6.3	Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-2650
16/01/2024	7.5	7.3	Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-3479
16/01/2024	6.4	6.3	Oracle JD Edwards EnterpriseOne Tools One-Click Provisioning denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-28756
16/01/2024	7.0	6.9	Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-1436
16/01/2024	9.8	9.6	Oracle JD Edwards EnterpriseOne Tools Interactive Engine SEC buffer overflow	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2022-37434
16/01/2024	9.8	9.6	Oracle JD Edwards EnterpriseOne Tools One-Click Provisioning Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.03	CVE-2023-32002
17/10/2023	5.3	5.2	Oracle JD Edwards EnterpriseOne Tools Deployment SEC vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2020-13956
18/07/2023	5.4	5.3	Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22050
18/07/2023	6.1	5.9	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22055
18/07/2023	8.1	7.9	Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-43548
18/07/2023	9.3	9.2	Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security escalazione di privilegi	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.00	CVE-2022-1471
18/04/2023	3.3	3.2	Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8908
18/04/2023	4.3	4.2	Oracle JD Edwards EnterpriseOne Tools Interoperability SEC rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-21927
18/04/2023	5.4	5.3	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-21936
18/04/2023	5.5	5.4	Oracle JD Edwards EnterpriseOne Tools Deployment SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-36373
18/04/2023	5.1	5.1	Oracle JD Edwards EnterpriseOne Tools Business Logic Infra SEC rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-15250
18/04/2023	6.5	6.3	Oracle JD Edwards EnterpriseOne Tools Interoperability SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41973
18/04/2023	6.5	6.3	Oracle JD Edwards EnterpriseOne Tools Interoperability SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-30129
18/04/2023	7.5	7.3	Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-42003
18/04/2023	7.5	7.2	Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator Security denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-25857
18/04/2023	8.1	7.9	Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure buffer overflow	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-1311
18/04/2023	8.2	8.0	Oracle JD Edwards EnterpriseOne Tools E1 Dev Platform Tech - Cloud Manager vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-21824

Oracle Jd Edwards Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

Contromisure

Sfruttabilità

Accesso al vettore

Autenticazione

Interazione dell'utente

C3BM Index

L'anno scorso

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Fornitore

Research

Exploiter 0 giorni

Exploiter aujourd'hui

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

🔒 Login Required

Do you know our Splunk app?