Apache Derby Luki w zabezpieczeniach

Oś czasu

Wersja

10.1.2.13
10.1.1.03
10.1.3.12
10.16.1.01
10.16.1.11

Przeciwdziałanie

Official Fix7
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

Wektor dostępu

Not Defined0
Physical0
Local1
Adjacent1
Network6

Uwierzytelnianie

Not Defined0
High0
Low4
None4

Interakcja z użytkownikiem

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤52
≤62
≤72
≤80
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤52
≤62
≤72
≤80
≤91
≤100

VulDB

≤10
≤20
≤31
≤41
≤52
≤61
≤72
≤80
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k1
<10k2
<25k4
<50k1
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k6
<2k1
<5k0
<10k1
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (13): 10.1.1, 10.1.2.1, 10.1.3.1, 10.2.2, 10.3.1.4, 10.4.1.3, 10.5.3, 10.12, 10.12.1, 10.14, 10.14.1, 10.16.1, 10.16.1.1

Link to Product Website: https://www.apache.org/

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-11-206.26.1Apache Derby Authenticator privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-46337
2018-05-075.85.6Apache Derby Network Server privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-1313
2017-10-247.07.0Apache Derby Export File privilege escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.05CVE-2010-2232
2016-10-039.18.7Apache Derby SqlXmlUtil XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2015-1832
2010-08-164.03.8Apache Derby weak encryption$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2009-4269
2007-07-054.34.1Apache Derby Authorization nieznana luka$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2006-7217
2007-07-054.34.1Apache Derby denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2006-7216
2005-12-315.35.1Apache Derby databasemetadata.geturl information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2005-4849

więcej wpisów autorstwa Apache

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!