Oracle Insurance Policy Administration J2ee 脆弱性

タイムライン

バージョン

11.0.26
10.06
10.26
10.14
11.04

修復

Official Fix14
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

悪用可能性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined14

アクセスベクター

Not Defined0
Physical0
Local0
Adjacent0
Network14

認証

Not Defined0
High0
Low0
None14

ユーザー操作

Not Defined0
Required4
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤92
≤106

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤86
≤90
≤106

VulDB

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤92
≤106

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤92
≤106

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤90
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k0
<2k0
<5k0
<10k2
<25k8
<50k0
<100k4
≥100k0

本日のエクスプロイト

<1k6
<2k0
<5k4
<10k0
<25k4
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Versions (20): 9.6.1, 9.7.1, 10.0, 10.0.1, 10.1, 10.1.2, 10.2, 10.2.0.37, 10.2.2, 10.2.4, 10.2.4.12, 11.0, 11.0.2, 11.0.2.25, 11.1, 11.1.0.15, 11.2, 11.2.0.26, 11.2.2, 11.3

Link to Product Website: https://www.oracle.com

公開済みBaseTemp脆弱性0day本日修復CTICVE
2021年07月20日8.17.7Oracle Insurance Policy Administration J2EE jackson-databind 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-35490
2021年01月19日9.89.6Oracle Insurance Policy Administration J2EE Architecture XML External Entity$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2020-10683
2020年10月20日3.73.6Oracle Insurance Policy Administration J2EE Architecture 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-9488
2020年10月20日7.57.2Oracle Insurance Policy Administration J2EE Admin Console 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-5398
2020年10月20日9.89.4Oracle Insurance Policy Administration J2EE Architecture 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-9546
2020年07月15日5.55.3Oracle Insurance Policy Administration J2EE Architecture XML External Entity$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-12415
2020年07月15日7.57.2Oracle Insurance Policy Administration J2EE Architecture 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-5398
2020年07月15日7.57.2Oracle Insurance Policy Administration J2EE Architecture サービス拒否$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-12626
2019年07月16日7.57.4Oracle Insurance Policy Administration J2EE Spring Framework サービス拒否$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-15756
2019年07月16日9.89.4Oracle Insurance Policy Administration J2EE Apache Commons FileUpload 特権昇格$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2016-1000031

4 非表示のエントリあり

エントリの検索キーワード: Oracle

Do you want to use VulDB in your project?

Use the official API to access entries easily!