Oracle Analytics Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

9.1.023
9.0.013
8.0.611
8.5.110
23.1.09

Przeciwdziałanie

Official Fix132
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Wykorzystywanie

High7
Functional0
Proof-of-Concept3
Unproven0
Not Defined122

Wektor dostępu

Not Defined0
Physical0
Local9
Adjacent1
Network122

Uwierzytelnianie

Not Defined0
High5
Low40
None87

Interakcja z użytkownikiem

Not Defined0
Required36
None96

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤31
≤43
≤54
≤68
≤737
≤826
≤923
≤1030

CVSSv3 Temp

≤10
≤20
≤31
≤43
≤54
≤626
≤726
≤835
≤911
≤1026

VulDB

≤10
≤21
≤31
≤43
≤53
≤68
≤736
≤824
≤927
≤1029

NVD

≤10
≤20
≤31
≤43
≤51
≤65
≤728
≤828
≤916
≤1026

CNA

≤10
≤20
≤31
≤40
≤51
≤65
≤74
≤84
≤910
≤101

Sprzedawca

≤10
≤21
≤31
≤40
≤51
≤63
≤715
≤88
≤913
≤1019

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k6
<10k21
<25k71
<50k7
<100k24
≥100k3

Wykorzystaj dzisiaj

<1k74
<2k18
<5k19
<10k4
<25k17
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (64): 2.0, 2.1, 2.2, 2.3, 2.3.1, 2.4, 2.6, 2.7, 2.7.0.1, 2.8, 3.1, 3.6.1, 4.0.1, 6.4, 7, 8.0.0 to 8.0.3, 8.0.0 to 8.0.4, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.7.8.1, 8.1, 8.2.1, 8.2.2, 8.2.3, 8.5.1, 8.7, 9, 9.0, 9.1, 11.1.1.5, 11.1.1.5.8, 12.0.1, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 14.0, 14.1, 15.0, 16.0, 18.8, 18.8.3.3, 19.1, 19.1.0.0.1, 19.1.0.0.2, 19.1.0.0.3, 19.1.0.0.4, 19.1.0.0.5, 19.1.0.0.6, 19.1.0.0.7, 19.12.11.1, 20.12.12, 21.0.001, 22, 23.1, 23.2, 23.2.0.0.2, 23.3, 23.4

Link to Product Website: https://www.oracle.com

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-01-165.65.5Oracle Analytics Desktop Visual Analyzer Integration cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-28439
2024-01-165.35.2Oracle Communications Cloud Native Core Network Data Analytics Function Configuration nieznana luka$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-40167
2024-01-166.16.0Oracle Communications Network Analytics Data Director Third Party denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-34055
2024-01-166.86.7Oracle Communications Network Analytics Data Director Third Party denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-34053
2024-01-167.57.3Oracle Communications Network Analytics Data Director Third Party denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-44487
2024-01-167.57.3Oracle Communications Network Analytics Data Director Install/Upgrade denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-44487
2024-01-167.57.3Oracle Communications Network Analytics Data Director General denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-44487
2024-01-169.18.9Oracle Communications Cloud Native Core Network Data Analytics Function Automated Test Suite privilege escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-44981
2023-10-176.56.3Oracle Communications Network Analytics Data Director Platform weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2283
2023-10-176.56.3Oracle Communications Network Analytics Data Director Third Party denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-34462
2023-10-177.57.3Oracle Communications Network Analytics Data Director Third Party denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20883
2023-07-184.34.3Oracle Communications Network Analytics Data Director Install/Upgrade information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-26049
2023-07-186.56.3Oracle Communications Network Analytics Data Director Base denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20861
2023-07-187.57.3Oracle Communications Network Analytics Data Director Install/Upgrade information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0361
2023-07-186.86.7Oracle Communications Network Analytics Data Director Core denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-41881
2023-07-188.88.6Oracle Communications Network Analytics Data Director Install/Upgrade memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-42898
2023-07-188.88.6Oracle Communications Network Analytics Data Director Core privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-25194
2023-07-189.89.4Oracle Communications Network Analytics Data Director Other privilege escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-36944
2023-07-189.89.6Oracle Communications Network Analytics Data Director Install/Upgrade Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-20873
2023-07-189.39.2Oracle Communications Network Analytics Data Director Core privilege escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-1471
2023-07-186.15.9Oracle GoldenGate Stream Analytics cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36033
2023-07-187.06.8Oracle GoldenGate Stream Analytics denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-42003
2023-04-186.26.1Oracle Financial Services Retail Performance Analytics Application cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41184
2023-04-186.26.1Oracle Financial Services Institutional Performance Analytics Application cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41184
2023-04-186.15.8Oracle Financial Services Enterprise Financial Performance Analytics Application nieznana luka$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41184

107 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Oracle

Do you know our Splunk app?

Download it now for free!