Oracle E-business 脆弱性

タイムライン

バージョン

12.1.3320
12.1.2220
12.2.3220
12.1.1218
12.2.4218

修復

Official Fix368
Temporary Fix0
Workaround0
Unavailable0
Not Defined126

悪用可能性

High2
Functional0
Proof-of-Concept72
Unproven26
Not Defined394

アクセスベクター

Not Defined0
Physical0
Local36
Adjacent0
Network458

認証

Not Defined0
High12
Low80
None402

ユーザー操作

Not Defined0
Required138
None356

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤422
≤534
≤6160
≤768
≤8114
≤958
≤1034

CVSSv3 Temp

≤10
≤20
≤38
≤426
≤548
≤6152
≤7140
≤874
≤926
≤1020

VulDB

≤10
≤20
≤34
≤422
≤534
≤6160
≤7156
≤824
≤960
≤1034

NVD

≤10
≤20
≤30
≤40
≤58
≤630
≤712
≤86
≤9136
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤54
≤624
≤74
≤84
≤932
≤108

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k0
<2k0
<5k8
<10k72
<25k312
<50k100
<100k2
≥100k0

本日のエクスプロイト

<1k402
<2k18
<5k20
<10k20
<25k34
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Versions (77): 1.2.1, 2.0, 2.1, 2.2, 3.5, 3.6, 4.3, 6.0.03, 6.1, 6.1.1, 6.2.3, 6.2.4, 7-9, 7.1.1.10.1, 9.2.0.7, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.7, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10.1, 11.5.10.2, 11.5.10cu1, 11.5.10cu2, 11.6, 11i, 11i10cu2, 12, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.01.2003, 12.1, 12.1.1, 12.1.2, 12.1.3, 12.2, 12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8, 12.2.9, 12.2.11, 13.4.1, 19.3.2, 22.1, 22.1.1, AMP 12.1.0.4, AMP 13.1.1.1, AMP 121020, AMP 121030, Suite 11.5.10.2

Link to Product Website: https://www.oracle.com

公開済みBaseTemp脆弱性0day本日修復CTICVE
2022年10月19日9.89.6Oracle Application Management Pack for E-Business Suite EBS EM Plugin SQLインジェクション$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-23305
2022年07月19日9.89.6Oracle E-Business Suite Information Discovery Packaging issues SQLインジェクション$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-23305
2022年05月20日6.46.3Oracle E-Business Suite Manage Proxies 弱い認証$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-21500
2022年04月19日6.66.4Oracle E-Business Suite Information Discovery Logging 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-44832
2022年04月19日9.89.6Oracle E-Business Suite Cloud Manager and Cloud Backup Module Logging SQLインジェクション$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-23305
2021年04月21日7.37.0Oracle Agile Product Lifecycle Management Integration Pack for E-Business Suite Installer 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10086
2021年04月21日6.15.8Oracle E-Business Suite Technology Stack Attachments/iRecruitment/Contracts (AntiSamy) クロスサイトスクリプティング$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-14735
2021年04月21日8.17.7Oracle E-Business Tax User Interface 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2274
2021年04月21日8.17.7Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2225
2021年01月19日7.57.3Oracle Agile Product Lifecycle Management Integration Pack for E-Business Suite Installation Issues XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-25649
2020年10月20日9.18.7Oracle E-Business Suite Secure Enterprise Search Search Integration Engine 未知の脆弱性$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14805
2020年07月15日8.27.8Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14681
2020年07月15日8.27.8Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14668
2020年04月15日8.27.8Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2840
2020年04月15日8.27.8Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2809
2020年04月15日8.27.8Oracle E-Business Intelligence DBI Setups 未知の脆弱性$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-2808
2019年07月16日3.73.6Oracle E-Business Suite jackson-databind 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2761
2019年07月16日5.35.1Oracle E-Business Suite jackson-databind 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2809
2019年07月16日5.85.6Oracle E-Business Suite Jackson-databind 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-2783
2019年07月16日5.85.6Oracle E-Business Suite jackson-databind 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2773
2019年07月16日6.56.2Oracle E-Business Suite OpenSSL 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-2825
2019年07月16日8.27.8Oracle E-Business Suite OpenSSL 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2672
2019年07月16日8.27.8Oracle E-Business Suite Apache ActiveMQ 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2668
2019年07月16日8.27.8Oracle E-Business Suite Apache ActiveMQ 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2666
2019年07月16日8.27.8Oracle E-Business Suite Bouncy Castle Java Library 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-2829

469 非表示のエントリあり

エントリの検索キーワード: Oracle

Interested in the pricing of exploits?

See the underground prices here!