Oracle Communications Application Session Controller Уязвимости

Временная шкала

Версия

3.04
3.14
3.24
3.34
3.44

Устранение последствий

Official Fix18
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Эксплуатационная пригодность

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined16

Вектор доступа

Not Defined0
Physical0
Local0
Adjacent0
Network18

Аутентификация

Not Defined0
High0
Low0
None18

Взаимодействие с пользователем

Not Defined0
Required2
None16

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤88
≤90
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤88
≤92
≤102

VulDB

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤86
≤92
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤88
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤82
≤92
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k0
<2k0
<5k0
<10k2
<25k12
<50k2
<100k2
≥100k0

Эксплойт сегодня

<1k12
<2k2
<5k2
<10k0
<25k2
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Versions (15): 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.7.1, 3.8, 3.8m0, 3.9, 3.9m0p1, 3.9m0p2, 3.9m0p3

Link to Product Website: https://www.oracle.com

Тип программного обеспечения: Cloud Software

ОпубликованоBaseTempУязвимости0dayСегодняЭ�RemCTICVE
19.10.20215.35.2Oracle Communications Application Session Controller Apache Commons IO раскрытие информации$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29425
19.10.20218.38.1Oracle Communications Application Session Controller JDBC Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2351
20.07.20217.57.2Oracle Communications Application Session Controller dojo эскалация привилегий$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-5258
21.04.20216.76.4Oracle Communications Application Session Controller Security эскалация привилегий$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11987
21.04.20219.08.6Oracle Communications Application Session Controller Bouncy Castle Java Library Remote Code Execution$100k и многое другое$5k-$25kNot DefinedOfficial Fix0.00CVE-2020-28052
20.01.20217.57.2Oracle Communications Application Session Controller Apache Batik эскалация привилегий$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-17566
20.01.20217.47.1Oracle Communications Application Session Controller Eclipse Jetty Local Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27216
20.10.20203.73.6Oracle Communications Application Session Controller WS/WEB раскрытие информации$5k-$25kРасчетNot DefinedOfficial Fix0.00CVE-2020-9488
20.10.20206.15.8Oracle Communications Application Session Controller межсайтовый скриптинг$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11022
20.10.20209.49.0Oracle Communications Application Session Controller WS/WEB эскалация привилегий$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-17638

7 больше записей не показано

больше записей по Oracle

Do you know our Splunk app?

Download it now for free!