Oracle Order Management 漏洞

时间轴

版本

5.04
12.1.12
12.1.22
12.1.32
12.2.32

修正

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

访问向量

Not Defined0
Physical0
Local2
Adjacent0
Network6

身份验证

Not Defined0
High0
Low2
None6

用户交互

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤90
≤102

VulDB

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k0
<10k2
<25k4
<50k0
<100k2
≥100k0

本日攻击

<1k4
<2k2
<5k0
<10k0
<25k2
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (14): 4.0, 4.5, 4.7, 5, 5.0, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 19.5

Link to Product Website: https://www.oracle.com

软件类型: Cloud Software

已发布BaseTemp漏洞0day今天易修正CTICVE
2021-07-206.76.4Oracle Retail Order Management System Cloud Service Apache Batik 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-11987
2021-01-195.95.8Oracle Retail Order Management System Upgrade Install 拒绝服务$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2021-45105
2021-01-198.38.1Oracle Retail Order Management System Upgrade Install Remote Code Execution$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-2351
2019-07-168.18.0Oracle Retail Order Management System Apache Struts 1 内存损坏$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2016-1181
2018-07-187.06.9Oracle Order Management Product Diagnostic Tools 权限升级$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2018-2954
2018-04-177.57.4Oracle Retail Order Management System Upgrade Install 权限升级$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2017-5664
2018-04-179.89.7Oracle Retail Order Management System Upgrade Install 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2017-5645

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!