Oracle Weblogic Server Sårbarheter

Tidslinje

Förra året

Version

12.2.1.4.0	180
12.2.1.3.0	163
14.1.1.0.0	160
12.1.3.0.0	106
10.3.6.0.0	89

Åtgärd

Official Fix	340
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	3

Utnyttjbarhet

High	7
Functional	0
Proof-of-Concept	12
Unproven	15
Not Defined	310

Åtkomstvektor

Not Defined	0
Physical	0
Local	19
Adjacent	0
Network	325

Autentisering

Not Defined	0
High	26
Low	33
None	285

Användarinteraktion

Not Defined	0
Required	68
None	276

C3BM Index

Förra året

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	5
≤5	25
≤6	54
≤7	75
≤8	88
≤9	18
≤10	78

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	6
≤5	33
≤6	83
≤7	61
≤8	71
≤9	14
≤10	75

VulDB

≤1	0
≤2	0
≤3	1
≤4	5
≤5	26
≤6	57
≤7	70
≤8	89
≤9	16
≤10	80

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	20
≤6	26
≤7	44
≤8	44
≤9	11
≤10	58

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	9
≤7	23
≤8	26
≤9	2
≤10	10

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	17
≤6	15
≤7	23
≤8	22
≤9	9
≤10	37

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	0
<2k	0
<5k	10
<10k	77
<25k	172
<50k	21
<100k	37
≥100k	27

Utnyttja idag

<1k	204
<2k	47
<5k	29
<10k	14
<25k	48
<50k	2
<100k	0
≥100k	0

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

Affected Versions (15): 9.2, 10.0.2, 10.3.2, 10.3.5, 10.3.6, 11.1.1.9, 12.1.1, 12.1.2, 12.1.3, 12.2.1, 12.2.1.1, 12.2.1.2, 12.2.1.3, 12.2.1.4, 14.1.1

Link to Product Website: https://www.oracle.com

Programvarutyp: Application Server Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
17/04/2024	6.4	6.3	Oracle WebLogic Server Core informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.08	CVE-2024-21007
17/04/2024	6.4	6.3	Oracle WebLogic Server Core informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.09	CVE-2024-21006
16/01/2024	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars förnekande av tjänsten	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-42503
16/01/2024	6.1	5.8	Oracle WebLogic Server Core okänd sårbarhet	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2024-20986
16/01/2024	6.1	5.9	Oracle WebLogic Server Centralized Thirdparty Jars cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-43643
16/01/2024	6.5	6.3	Oracle WebLogic Server Centralized Thirdparty Jars informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-44483
16/01/2024	7.5	7.2	Oracle WebLogic Server Core informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-20931
16/01/2024	8.6	8.2	Oracle WebLogic Server Core okänd sårbarhet	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2024-20927
16/01/2024	9.1	9.0	Oracle WebLogic Server Centralized Thirdparty Jars privilegier eskalering	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2023-49093
17/10/2023	4.7	4.6	Oracle WebLogic Server Centralized Thirdparty Jars förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-35116
17/10/2023	5.3	5.2	Oracle WebLogic Server Centralized Thirdparty Jars okänd sårbarhet	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-13956
17/10/2023	5.5	5.4	Oracle WebLogic Server Centralized Thirdparty Jars förnekande av tjänsten	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-36374
17/10/2023	7.1	6.8	Oracle WebLogic Server Centralized Thirdparty Jars privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-2976
17/10/2023	7.1	6.9	Oracle WebLogic Server Centralized Thirdparty Jars privilegier eskalering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-44729
17/10/2023	7.5	7.3	Oracle WebLogic Server Core informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-22108
17/10/2023	7.5	7.3	Oracle WebLogic Server Core informationsgivning	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22086
17/10/2023	7.3	7.2	Oracle WebLogic Server Centralized Thirdparty Jars svag autentisering	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-23491
17/10/2023	7.5	7.3	Oracle WebLogic Server Centralized Thirdparty Jars förnekande av tjänsten	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-29546
17/10/2023	8.1	7.9	Oracle WebLogic Server Core Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-22101
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.01	CVE-2023-22089
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22072
17/10/2023	9.8	9.6	Oracle WebLogic Server Core Remote Code Execution	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2023-22069
17/10/2023	9.8	9.6	Oracle WebLogic Server Centralized Thirdparty Jars privilegier eskalering	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.03	CVE-2022-29599
17/10/2023	9.8	9.6	Oracle WebLogic Server Core minneskorruption	$25k-$100k	$25k-$100k	Not Defined	Official Fix	0.04	CVE-2022-42920
18/07/2023	3.3	3.2	Oracle WebLogic Server Centralized Thirdparty Jars informationsgivning	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-8908

319 fler poster visas inte

🔒 Login Required

You need to signup and login to see more of the remaining 319 results.

fler inlägg av Oracle

◂ TidigareÖversiktNästa ▸

Interested in the pricing of exploits?

See the underground prices here!