Oracle Weblogic Server Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

12.2.1.4.0	180
12.2.1.3.0	163
14.1.1.0.0	160
12.1.3.0.0	106
10.3.6.0.0	89

Contromisure

Official Fix	340
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	3

Sfruttabilità

High	11
Functional	0
Proof-of-Concept	11
Unproven	15
Not Defined	307

Accesso al vettore

Not Defined	0
Physical	0
Local	19
Adjacent	0
Network	325

Autenticazione

Not Defined	0
High	26
Low	33
None	285

Interazione dell'utente

Not Defined	0
Required	68
None	276

C3BM Index

L'anno scorso

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	5
≤5	25
≤6	54
≤7	75
≤8	88
≤9	18
≤10	78

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	6
≤5	33
≤6	83
≤7	61
≤8	71
≤9	14
≤10	75

VulDB

≤1	0
≤2	0
≤3	1
≤4	5
≤5	26
≤6	57
≤7	70
≤8	89
≤9	16
≤10	80

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	20
≤6	26
≤7	44
≤8	44
≤9	11
≤10	58

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	9
≤7	23
≤8	26
≤9	2
≤10	10

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	17
≤6	15
≤7	23
≤8	22
≤9	9
≤10	37

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	0
<5k	10
<10k	77
<25k	174
<50k	19
<100k	37
≥100k	27

Exploiter aujourd'hui

<1k	203
<2k	48
<5k	30
<10k	11
<25k	50
<50k	2
<100k	0
≥100k	0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (15): 9.2, 10.0.2, 10.3.2, 10.3.5, 10.3.6, 11.1.1.9, 12.1.1, 12.1.2, 12.1.3, 12.2.1, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 14.1.1

Link to Product Website: https://www.oracle.com

Tipo di software: Application Server Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
17/04/2024	6.4	6.3	Oracle WebLogic Server Core rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2024-21007
17/04/2024	6.4	6.3	Oracle WebLogic Server Core rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2024-21006
16/01/2024	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-42503
16/01/2024	6.1	5.8	Oracle WebLogic Server Core vulnerabilità sconosciuta	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2024-20986
16/01/2024	6.1	5.9	Oracle WebLogic Server Centralized Thirdparty Jars cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-43643
16/01/2024	6.5	6.3	Oracle WebLogic Server Centralized Thirdparty Jars rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-44483
16/01/2024	7.5	7.2	Oracle WebLogic Server Core rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-20931
16/01/2024	8.6	8.2	Oracle WebLogic Server Core vulnerabilità sconosciuta	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2024-20927
16/01/2024	9.1	9.0	Oracle WebLogic Server Centralized Thirdparty Jars escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-49093
17/10/2023	4.7	4.6	Oracle WebLogic Server Centralized Thirdparty Jars denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-35116
17/10/2023	5.3	5.2	Oracle WebLogic Server Centralized Thirdparty Jars vulnerabilità sconosciuta	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-13956
17/10/2023	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-36374
17/10/2023	7.1	6.8	Oracle WebLogic Server Centralized Thirdparty Jars escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-2976
17/10/2023	7.1	6.9	Oracle WebLogic Server Centralized Thirdparty Jars escalazione di privilegi	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-44729
17/10/2023	7.5	7.3	Oracle WebLogic Server Core rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-22108
17/10/2023	7.5	7.3	Oracle WebLogic Server Core rivelazione di un 'informazione	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22086
17/10/2023	7.3	7.2	Oracle WebLogic Server Centralized Thirdparty Jars autenticazione debole	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-23491
17/10/2023	7.5	7.3	Oracle WebLogic Server Centralized Thirdparty Jars denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-29546
17/10/2023	8.1	7.9	Oracle WebLogic Server Core Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22101
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.05	CVE-2023-22089
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22072
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22069
17/10/2023	9.8	9.6	Oracle WebLogic Server Centralized Thirdparty Jars escalazione di privilegi	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.03	CVE-2022-29599
17/10/2023	9.8	9.6	Oracle WebLogic Server Core buffer overflow	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.04	CVE-2022-42920
18/07/2023	3.3	3.2	Oracle WebLogic Server Centralized Thirdparty Jars rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8908

319 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 319 results.

altre voci di Oracle

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!