Oracle Communications Cloud Native Core Console Luki w zabezpieczeniach

Oś czasu

Wersja

1.9.012
22.3.08
23.1.15
22.2.05
22.4.24

Przeciwdziałanie

Official Fix38
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Wykorzystywanie

High2
Functional0
Proof-of-Concept0
Unproven0
Not Defined36

Wektor dostępu

Not Defined0
Physical0
Local3
Adjacent0
Network35

Uwierzytelnianie

Not Defined0
High2
Low9
None27

Interakcja z użytkownikiem

Not Defined0
Required4
None34

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤65
≤711
≤814
≤91
≤105

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤67
≤711
≤812
≤91
≤105

VulDB

≤10
≤20
≤30
≤40
≤51
≤67
≤77
≤817
≤91
≤105

NVD

≤10
≤20
≤30
≤40
≤51
≤65
≤76
≤814
≤91
≤104

CNA

≤10
≤20
≤31
≤40
≤51
≤65
≤71
≤82
≤91
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k2
<10k13
<25k18
<50k0
<100k5
≥100k0

Wykorzystaj dzisiaj

<1k12
<2k16
<5k5
<10k0
<25k5
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (13): 1.4, 1.7, 1.9, 22.1, 22.1.2, 22.2, 22.3, 22.4, 22.4.2, 23.1.1, 23.1.2, 23.2.1, 23.3.1

Link to Product Website: https://www.oracle.com

Typ oprogramowania: Cloud Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-01-166.56.3Oracle Communications Cloud Native Core Console Configuration weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-2283
2024-01-166.16.0Oracle Communications Cloud Native Core Console Configuration denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-34055
2024-01-166.56.3Oracle Communications Cloud Native Core Console Configuration information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-44483
2023-10-174.34.3Oracle Communications Cloud Native Core Console Configuration information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-26049
2023-10-176.66.5Oracle Communications Cloud Native Core Console Configuration privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2976
2023-07-185.55.4Oracle Communications Cloud Native Core Console Configuration information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-45787
2023-07-186.56.3Oracle Communications Cloud Native Core Console Install/Upgrade denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20861
2023-07-187.57.3Oracle Communications Cloud Native Core Console Configuration information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0361
2023-07-189.89.6Oracle Communications Cloud Native Core Console Configuration Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-20862
2023-04-187.77.6Oracle Communications Cloud Native Core Console Configuration denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-41966

28 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Oracle

Interested in the pricing of exploits?

See the underground prices here!