Oracle Converged Application Server - Service Controller 漏洞

时间轴

版本

6.2.01
6.21
6.01
6.11

修正

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined3

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network3

身份验证

Not Defined0
High0
Low0
None3

用户交互

Not Defined0
Required0
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤80
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤80
≤90
≤101

VulDB

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k0
<10k1
<25k1
<50k0
<100k1
≥100k0

本日攻击

<1k1
<2k1
<5k0
<10k0
<25k1
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (3): 6.0, 6.1, 6.2

Link to Product Website: https://www.oracle.com

软件类型: Cloud Software

已发布BaseTemp漏洞0day今天易修正CTICVE
2023-07-187.06.9Oracle Communications Converged Application Server - Service Controller Third Party 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1436
2021-10-195.35.2Oracle Communications Converged Application Server - Service Controller Apache Commons IO 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29425
2019-07-169.89.7Oracle Converged Application Server - Service Controller (Spring Framework 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2018-1275

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!