Oracle Graph Server And Client 漏洞

时间轴

版本

Prior to 22.4.61
Prior to 23.4.01
21.4.61
22.4.21
23.1.01

修正

Official Fix7
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined7

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network7

身份验证

Not Defined0
High0
Low2
None5

用户交互

Not Defined0
Required1
None6

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤61
≤72
≤83
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤61
≤72
≤83
≤91
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤61
≤72
≤83
≤91
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤84
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤91
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k1
<10k2
<25k3
<50k1
<100k0
≥100k0

本日攻击

<1k5
<2k1
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (8): 21.0, 21.1, 21.2, 21.4.6, 22.4.2, 23.1, Prior to 22.4.6, Prior to 23.4

Link to Product Website: https://www.oracle.com

已发布BaseTemp漏洞0day今天易修正CTICVE
2024-01-167.57.3Oracle Graph Server and Client Packaging 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-46589
2023-07-187.57.3Oracle Graph Server and Client Packaging 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1370
2023-04-187.06.8Oracle Graph Server and Client Packaging 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-42003
2022-07-197.06.8Oracle Graph Server and Client 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-36518
2021-10-197.57.3Oracle Graph Server and Client Apache Tomcat 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-25122
2021-01-195.35.2Oracle Graph Server and Client Packaging/Install 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-33037
2021-01-198.38.1Oracle Graph Server and Client Packaging/install issues Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2351

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!