Bea Weblogic Portal Luki w zabezpieczeniach

Oś czasu

Wersja

8.1 SP5	14
9.2	6
8.1 SP4	2
8.0	2
8.1	2

Przeciwdziałanie

Official Fix	16
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	8

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	22
Unproven	0
Not Defined	2

Wektor dostępu

Not Defined	0
Physical	0
Local	2
Adjacent	2
Network	20

Uwierzytelnianie

Not Defined	0
High	0
Low	2
None	22

Interakcja z użytkownikiem

Not Defined	0
Required	2
None	22

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	8
≤7	4
≤8	8
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	8
≤7	8
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	8
≤7	4
≤8	8
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	0
<10k	8
<25k	10
<50k	6
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	22
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Affected Versions (6): 8.0, 8.1, 8.1 SP4, 8.1 SP5, 9.2, 10.0

Link to Product Website: https://www.oracle.com/corporate/acquisitions/bea/

Typ oprogramowania: Application Server Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2008-02-22	5.4	4.9	BEA WebLogic Portal Access Restriction privilege escalation	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2008-0896
2008-02-20	7.3	6.9	BEA WebLogic Portal Administration Console privilege escalation	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2008-0870
2008-02-20	4.3	3.9	BEA WebLogic Portal cross site scripting	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2008-0868
2008-02-20	5.3	5.0	BEA WebLogic Portal privilege escalation	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2008-0865
2008-02-20	5.3	5.0	BEA WebLogic Portal Access Restriction privilege escalation	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2008-0864
2007-05-14	4.2	4.0	BEA WebLogic Portal nieznana luka	$25k-$100k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-2703
2007-05-14	3.5	3.3	BEA WebLogic Portal Rich Text Editor cross site scripting	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-2702
2007-01-22	5.9	5.6	BEA WebLogic Portal Local Privilege Escalation	$25k-$100k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-0423
2007-01-17	5.3	5.3	BEA BEA WebLogic Portal privilege escalation	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00
2007-01-16	7.3	6.9	BEA WebLogic Portal Remote Code Execution	$25k-$100k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-0426

14 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

więcej wpisów autorstwa Bea

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!