Compuware Luki w zabezpieczeniach

Oś czasu

Rodzaj

Jenkins Plugin	8
Hardware Driver Software	4

Produkt

Compuware Topaz for Total Test Plugin	6
Compuware DriverStudio	4
Compuware Topaz Utilities Plugin	2

Przeciwdziałanie

Official Fix	0
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	12

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	8
Network	4

Uwierzytelnianie

Not Defined	0
High	0
Low	8
None	4

Interakcja z użytkownikiem

Not Defined	0
Required	0
None	12

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	2
≤7	2
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	2
≤7	2
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	0
≤6	4
≤7	0
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	2
≤7	0
≤8	2
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	10
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	12
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (7): Code Coverage Plugin (1), DriverStudio (2), SoftICE DriverStudio (1), Source Code Download for Endevor, PDS, and ISPW Plugin (1), Strobe Measurement Plugin (1), Topaz Utilities Plugin (1), Topaz for Total Test Plugin (4)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2022-10-20	6.5	6.5	Compuware Topaz for Total Test Plugin XML Parser XML External Entity	Jenkins Plugin	Not Defined	Not Defined	0.00158	0.00	CVE-2022-43430
2022-10-20	3.9	3.9	Compuware Strobe Measurement Plugin HTTP Endpoint privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00054	0.00	CVE-2022-43431
2022-10-20	3.9	3.9	Compuware Topaz for Total Test Plugin HTTP Endpoint privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00054	0.00	CVE-2022-43427
2022-10-20	3.5	3.5	Compuware Topaz for Total Test Plugin Message privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00158	0.00	CVE-2022-43429
2022-10-20	4.4	4.4	Compuware Topaz for Total Test Plugin Message privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00078	0.00	CVE-2022-43428
2022-10-20	3.5	3.5	Compuware Code Coverage Plugin privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00078	0.08	CVE-2022-43424
2022-10-20	4.4	4.4	Compuware Topaz Utilities Plugin Message privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00078	0.00	CVE-2022-43422
2022-10-20	4.8	4.8	Compuware Source Code Download for Endevor, PDS, and ISPW Plugin Message privilege escalation	Jenkins Plugin	Not Defined	Not Defined	0.00078	0.00	CVE-2022-43423
2005-09-22	5.3	5.3	Compuware DriverStudio Control Service dsrsvc.exe denial of service	Hardware Driver Software	Not Defined	Not Defined	0.00625	0.00	CVE-2005-3035
2005-09-22	7.3	7.3	Compuware DriverStudio Control Service dsrsvc.exe Remote Code Execution	Hardware Driver Software	Not Defined	Not Defined	0.00557	0.00	CVE-2005-3034

1 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 1 results.

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!