Oracle Commerce Platform 漏洞

时间轴

版本

11.3.217
11.3.015
11.3.114
5.35
6.05

修正

Official Fix34
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

易受攻击性

High2
Functional0
Proof-of-Concept0
Unproven0
Not Defined34

访问向量

Not Defined0
Physical0
Local1
Adjacent0
Network35

身份验证

Not Defined0
High1
Low4
None31

用户交互

Not Defined0
Required10
None26

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤41
≤53
≤67
≤78
≤86
≤92
≤109

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤53
≤610
≤75
≤86
≤92
≤109

VulDB

≤10
≤20
≤30
≤41
≤52
≤67
≤79
≤85
≤93
≤109

NVD

≤10
≤20
≤30
≤41
≤52
≤62
≤77
≤85
≤90
≤108

CNA

≤10
≤20
≤30
≤41
≤51
≤62
≤71
≤80
≤91
≤101

供应商

≤10
≤20
≤30
≤41
≤52
≤62
≤74
≤81
≤91
≤103

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k2
<10k6
<25k16
<50k2
<100k8
≥100k2

本日攻击

<1k19
<2k4
<5k2
<10k1
<25k10
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (31): 3.0, 3.0.2, 3.1.1, 3.1.2, 4.0, 5.0, 5.1, 5.2, 5.3, 6, 6.0, 6.0.1, 6.1, 9.4, 10.0, 10.0.3.5, 10.2, 10.2.0.5, 11, 11.0, 11.1, 11.2, 11.2.0.1, 11.2.0.2, 11.2.0.3, 11.3, 11.3.1, 11.3.2, 15.0, 15.1, 16.0

Link to Product Website: https://www.oracle.com

已发布BaseTemp漏洞0day今天易修正CTICVE
2024-04-174.84.7Oracle Commerce Platform Remote Code Execution$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-21100
2024-01-167.27.1Oracle Commerce Platform Endeca Integration 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2022-40152
2023-07-185.65.5Oracle Commerce Platform WebUI 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-28439
2023-07-187.57.3Oracle Commerce Platform 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-24998
2023-04-189.89.6Oracle Commerce Platform 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2021-42575
2022-10-196.56.3Oracle Commerce Platform Endeca Integration 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22971
2022-10-196.56.3Oracle Commerce Platform Endeca Integration 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-23437
2022-10-199.89.4Oracle Commerce Platform Dynamo Application Framework XML External Entity$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2020-10683
2022-07-195.55.4Oracle Commerce Platform Dynamo Application Framework 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-21559
2022-07-197.57.3Oracle Commerce Platform Endeca Integration 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-40690

26 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 26 results.

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!