Oracle Http Server Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

12.2.1.4.0	41
12.2.1.3.0	25
11.1.1.7.0	23
12.1.2.0	15
11.1.1.9.0	13

Przeciwdziałanie

Official Fix	109
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	6

Wykorzystywanie

High	6
Functional	0
Proof-of-Concept	24
Unproven	8
Not Defined	78

Wektor dostępu

Not Defined	0
Physical	0
Local	10
Adjacent	0
Network	106

Uwierzytelnianie

Not Defined	0
High	1
Low	10
None	105

Interakcja z użytkownikiem

Not Defined	0
Required	19
None	97

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	8
≤5	10
≤6	45
≤7	10
≤8	23
≤9	4
≤10	16

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	10
≤5	23
≤6	32
≤7	16
≤8	15
≤9	8
≤10	11

VulDB

≤1	0
≤2	0
≤3	0
≤4	9
≤5	9
≤6	45
≤7	11
≤8	23
≤9	3
≤10	16

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	10
≤7	7
≤8	14
≤9	4
≤10	13

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	3
≤7	1
≤8	2
≤9	0
≤10	1

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	6
≤7	2
≤8	4
≤9	1
≤10	1

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	1
<10k	47
<25k	46
<50k	9
<100k	10
≥100k	3

Wykorzystaj dzisiaj

<1k	84
<2k	11
<5k	8
<10k	2
<25k	10
<50k	1
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (18): 1.3.22, 2.1, 2.2.9, 9.2.0.7, 9.2.0.8, 10.1.3.5, 11.1.1.5, 11.1.1.6, 11.1.1.7, 11.1.1.9, 11.1.2.1, 12.1.2, 12.1.3, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 12.2.1.5

Link to Product Website: https://www.oracle.com

Typ oprogramowania: Web Server

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-04-17	5.3	5.2	Oracle HTTP Server Web Listener information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-20991
2024-01-16	5.3	5.2	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-3817
2024-01-16	9.8	9.6	Oracle HTTP Server Third Party memory corruption	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2023-38545
2023-10-17	5.3	5.2	Oracle HTTP Server SSL Module privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-37436
2023-10-17	6.5	6.3	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-28484
2023-10-17	6.5	6.2	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-2650
2023-10-17	7.5	7.3	Oracle HTTP Server Web Listener information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22019
2023-07-18	7.5	7.3	Oracle HTTP Server Thirdparty denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-43680
2023-07-18	9.1	8.9	Oracle HTTP Server SSL Module weak encryption	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.03	CVE-2023-23914
2023-07-18	9.8	9.6	Oracle HTTP Server SSL Module privilege escalation	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.02	CVE-2023-25690
2023-04-18	7.5	7.3	Oracle HTTP Server SSL Module information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-43551
2023-04-18	7.5	7.3	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-34798
2023-04-18	7.8	7.6	Oracle HTTP Server SSL Module XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-40304
2023-04-18	9.8	9.6	Oracle HTTP Server SSL Module memory corruption	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-37434
2023-01-17	6.5	6.3	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-29824
2023-01-17	7.5	7.3	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-42717
2023-01-17	7.5	7.3	Oracle HTTP Server SSL Module weak authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-27782
2023-01-17	7.5	7.3	Oracle HTTP Server Centralized Thirdparty Jars denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-25032
2023-01-17	9.8	9.6	Oracle HTTP Server SSL Module memory corruption	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-2274
2023-01-17	9.8	9.6	Oracle HTTP Server SSL Module weak authentication	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2022-31813
2023-01-17	9.8	9.6	Oracle HTTP Server Centralized Thirdparty Jars information disclosure	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2022-25236
2022-10-19	5.3	5.2	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14155
2022-10-19	5.9	5.8	Oracle HTTP Server SSL Module denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-3537
2022-10-19	6.5	6.3	Oracle HTTP Server Web Listener information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-24977
2022-10-19	7.1	6.9	Oracle HTTP Server OHS Config MBeans nieznana luka	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-21593

91 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 91 results.

więcej wpisów autorstwa Oracle

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!