Oracle Application Server Sårbarheter

Tidslinje

Förra året

Version

9.0.4.324
15.0.312
16.0.310
7.19
9.0.2.39

Åtgärd

Official Fix112
Temporary Fix0
Workaround3
Unavailable1
Not Defined91

Utnyttjbarhet

High1
Functional0
Proof-of-Concept91
Unproven0
Not Defined115

Åtkomstvektor

Not Defined0
Physical0
Local30
Adjacent0
Network177

Autentisering

Not Defined0
High1
Low40
None166

Användarinteraktion

Not Defined0
Required32
None175

C3BM Index

Förra året

CVSSv3 Base

≤10
≤20
≤32
≤413
≤514
≤656
≤716
≤845
≤928
≤1033

CVSSv3 Temp

≤10
≤20
≤33
≤415
≤528
≤644
≤735
≤834
≤926
≤1022

VulDB

≤10
≤20
≤32
≤413
≤514
≤656
≤715
≤845
≤927
≤1035

NVD

≤10
≤20
≤30
≤41
≤51
≤67
≤78
≤812
≤97
≤1011

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤70
≤81
≤91
≤101

Säljare

≤10
≤20
≤30
≤40
≤50
≤63
≤71
≤85
≤96
≤1010

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k0
<2k0
<5k5
<10k55
<25k75
<50k61
<100k9
≥100k2

Utnyttja idag

<1k150
<2k26
<5k14
<10k7
<25k10
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

Affected Versions (105): 0.9.8, 1, 1.0, 1.0.1, 1.0.2, 1.0.2.0.1, 1.0.2.1s, 1.0.2.2, 1.1.8.26, 2, 2.0.0.1, 2.0.0.2, 2.1, 2.1.1, 3, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.1, 3.1.1, 3.1.2, 4.0, 4.0.8, 4.0.8.2, 5.1, 5.6.2, 6.0, 6.0.8.26 Ps17, 6.0.8.26(ps17), 6.1, 6.2, 7, 7.0, 7.0.4.3, 7.0.4.4, 7.1, 7.4.9, 8, 8.0, 8.1, 8.1.7, 8.1.9, 8.2, 8.3, 9, 9.0, 9.0.0.4, 9.0.1, 9.0.2, 9.0.2.0.1, 9.0.2.3, 9.0.3, 9.0.3.1, 9.0.4, 9.0.4.1, 9.0.4.2, 9.0.4.3, 9.2.0.1, 9.2.0.6, 9.2.1, 10.1.0.4.2, 10.1.0.5, 10.1.2, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.2, 10.1.2.3, 10.1.3, 10.1.3.1, 10.1.3.2, 10.1.3.3, 10.1.3.4, 10.1.3.4.1, 10.1.4.1, 10g, 12.1.3, 13.1, 13.2, 13.3, 13.3.3, 13.4, 13.4.3, 14.0, 14.0.3, 14.0.3.26, 14.1, 14.1.3, 14.1.3.37, 14.1.3.46, 14.1.3.47, 15.0, 15.0.2, 15.0.3, 15.0.3.1, 15.0.3.115, 15.0.3.116, 16, 16.0, 16.0.3, 16.0.3.24, 16.0.3.26

Link to Product Website: https://www.oracle.com

Programvarutyp: Application Server Software

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
18/07/20236.56.3Oracle Retail Predictive Application Server RPAS Server förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
18/07/20237.06.9Oracle Communications Converged Application Server - Service Controller Third Party förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1436
18/04/20239.89.6Oracle Retail Predictive Application Server RPAS Server minneskorruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2022-37434
18/04/20238.18.0Oracle Retail Predictive Application Server RPAS Server svag kryptering$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2020-35168
17/01/20239.89.6Oracle Communications Converged Application Server Core Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-21890
19/10/20226.56.3Oracle Retail Predictive Application Server RPAS Server förnekande av tjänsten$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-22971
19/10/20227.57.3Oracle Communications Evolved Communications Application Server Platform förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-36518
19/10/20227.57.3Oracle Communications Converged Application Server-Service Controller Platform förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-28165
19/04/20226.66.4Oracle Communications Evolved Communications Application Server SDC/SCF privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-44832
19/10/20215.55.4Oracle Retail Predictive Application Server Apache Ant förnekande av tjänsten$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36374
19/10/20217.87.6Oracle Retail Predictive Application Server Spring Framework privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22118
19/10/20215.35.2Oracle Communications Converged Application Server - Service Controller Apache Commons IO informationsgivning$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29425
20/07/20215.55.3Oracle Communications Evolved Communications Application Server Apache Groovy informationsgivning$0-$5kBeräknandeNot DefinedOfficial Fix0.00CVE-2020-17521
20/07/20217.37.0Oracle Communications Evolved Communications Application Server Apache Commons BeanUtils privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10086
20/07/20217.57.2Oracle Communications Evolved Communications Application Server jackson-databind XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-25649
21/04/20216.56.2Oracle Retail Predictive Application Server RPAS Server informationsgivning$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-3740
21/04/20217.37.0Oracle Retail Predictive Application Server RPAS Fusion Client privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-10086
21/04/20217.57.2Oracle Retail Predictive Application Server RPAS Fusion Client okänd sårbarhet$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11979
21/04/20217.77.3Oracle Retail Predictive Application Server RPAS Fusion Client Privilege Escalation$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-5421
21/04/20217.57.2Oracle Application Server OpenSSL förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-1967
21/04/20214.84.6Oracle Communications Converged Application Server SC Admin server okänd sårbarhet$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27218
19/01/20215.95.8Oracle Retail Predictive Application Server RPAS Server förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-45105
19/01/20218.38.1Oracle Retail Predictive Application Server RPAS Server Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-2351
17/12/20206.36.3Oracle Application Server Websocket privilegier eskalering$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2020-25096
20/10/20203.73.6Oracle Retail Predictive Application Server RPAS Fusion Client informationsgivning$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-9488

182 fler poster visas inte

fler inlägg av Oracle

Interested in the pricing of exploits?

See the underground prices here!