Oracle Retail 漏洞

时间轴

去年

版本

14.1136
15.0121
16.0.3108
16.099
14.082

修正

Official Fix687
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High15
Functional0
Proof-of-Concept2
Unproven1
Not Defined669

访问向量

Not Defined0
Physical5
Local59
Adjacent2
Network621

身份验证

Not Defined0
High31
Low126
None530

用户交互

Not Defined0
Required156
None531

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤31
≤424
≤520
≤671
≤7133
≤8176
≤9119
≤10143

CVSSv3 Temp

≤10
≤20
≤33
≤422
≤524
≤6105
≤7125
≤8208
≤961
≤10139

VulDB

≤10
≤20
≤31
≤429
≤519
≤668
≤7127
≤8177
≤9104
≤10162

NVD

≤10
≤20
≤31
≤415
≤517
≤663
≤7141
≤8146
≤982
≤10158

CNA

≤10
≤20
≤31
≤42
≤54
≤65
≤78
≤811
≤921
≤108

供应商

≤10
≤20
≤31
≤411
≤57
≤614
≤742
≤863
≤969
≤10107

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k1
<5k42
<10k145
<25k292
<50k75
<100k118
≥100k13

本日攻击

<1k434
<2k86
<5k31
<10k35
<25k96
<50k5
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (187): 1.0, 1.1.125, 1.5, 1.9, 1.10, 1.60.7, 1.60.9, 1.64, 2, 2.0, 2.1.132, 2.3.8, 2.4.9, 2.8.1, 3.0, 3.2.1, 3.3, 3.4.2, 3.5, 3.6, 4.0, 4.0.1, 4.1, 4.5, 4.5.1, 4.7, 4.8, 5, 5.0, 5.0.3, 5.1, 5.2, 5.3, 5.5, 5.5.3, 6, 6.0, 6.0.1, 6.0.6, 6.0.11, 6.0.12, 6.1, 6.5, 6.5.2, 6.5.11, 6.5.12, 7.0, 7.0.6, 7.0.7, 7.1, 7.1.6, 7.1.7, 8.0, 8.0.0 to 8.0.3, 8.0.0 to 8.0.4, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.7.8.1, 9.89, 10.0, 10.0.1, 10.2, 10.5, 10.6, 10.7, 10.7.7, 10.8, 10.8.1, 10.8.2, 10.8.3, 11.0, 11.4, 12.0, 12.0 13, 12.0 IN, 12.0.9IN, 12.0.12, 12.0IN, 12.1, 12.1.1, 12.1.2, 12.5, 13, 13.0, 13.0.7, 13.1, 13.1.9, 13.2, 13.2.5, 13.2.8, 13.2.9, 13.3, 13.3.1, 13.3.3, 13.3.8, 13.4, 13.4.3, 13.4.9, 14, 14.0, 14.0.0 14.1, 14.0.3, 14.0.3.26, 14.0.4, 14.0.4.13, 14.0.5, 14.1, 14.1.2, 14.1.3, 14.1.3.1, 14.1.3.2, 14.1.3.5, 14.1.3.9, 14.1.3.14, 14.1.3.37, 14.1.3.46, 14.1.3.47, 14.2, 15, 15.0, 15.0.1, 15.0.2, 15.0.3, 15.0.3.1, 15.0.3.3, 15.0.3.5, 15.0.3.8, 15.0.3. 16.0.2, 15.0.3.115, 15.0.3.116, 15.0.4, 15.02, 15.1, 16, 16.0, 16.0.025, 16.0.1, 16.0.2, 16.0.3, 16.0.3.5, 16.0.3.7, 16.0.3.24, 16.0.3.26, 16.0.4, 16.0.5, 16.0.6, 17, 17.0, 17.0.2, 17.0.3, 17.0.4, 17.0.6, 18, 18.0, 18.0.0.12, 18.0.0.13, 18.0.0.14, 18.0.1, 18.0.2, 18.0.3, 18.0.5, 18.1, 19, 19.0, 19.0.0.6, 19.0.0.7, 19.0.0.8, 19.0.1, 19.0.2, 19.0.2,, 19.0.4, 19.1, 19.2, 19.3, 19.5, 20.0.1, 20.0.3, 21, 21.0.001, 21.0.1, 21.0.2, 22, 23, 38090, RM2.0

Link to Product Website: https://www.oracle.com

已发布BaseTemp漏洞0day今天修正CTICVE
2024-01-164.54.5Oracle Retail Customer Management and Segmentation Foundation Internal Operations 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-35887
2024-01-166.26.1Oracle Retail Customer Management and Segmentation Foundation Internal Operations 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-41182
2024-01-166.15.8Oracle Retail Customer Management and Segmentation Foundation Internal Operations 跨网站脚本$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-26870
2024-01-167.57.3Oracle Retail EFTLink Install 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-44487
2024-01-167.57.3Oracle Retail Customer Management and Segmentation Foundation Internal Operations 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-24998
2024-01-169.89.6Oracle Retail Advanced Inventory Planning Operations/Maintenance 内存损坏$25k-$100k$25k-$100kNot DefinedOfficial Fix0.04CVE-2022-42920
2023-10-174.34.3Oracle Retail EFTLink Installation 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-26049
2023-10-176.56.3Oracle Retail Xstore Point of Service Xenvironment 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
2023-10-176.56.3Oracle Retail Fiscal Management RTIL 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
2023-10-176.56.3Oracle Retail Customer Management and Segmentation Foundation Security 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
2023-10-176.66.5Oracle Retail Integration Bus RIB Kernal 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2976
2023-10-176.66.5Oracle Retail Financial Integration PeopleSoft Integration Bugs 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-2976
2023-10-176.66.5Oracle Retail Customer Management and Segmentation Foundation Security 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-2976
2023-10-177.57.3Oracle Retail Xstore Point of Service Xenvironment 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-24998
2023-10-179.39.2Oracle Retail Xstore Point of Service Xenvironment 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-1471
2023-10-179.89.6Oracle Retail Service Backbone Installation 内存损坏$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2022-42920
2023-10-179.89.6Oracle Retail Merchandising System Foundation 内存损坏$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-42920
2023-10-179.89.6Oracle Retail Integration Bus RIB 内存损坏$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-42920
2023-10-179.89.6Oracle Retail Financial Integration PeopleSoft Integration Bugs 内存损坏$25k-$100k$25k-$100kNot DefinedOfficial Fix0.00CVE-2022-42920
2023-10-179.89.6Oracle Retail Customer Management and Segmentation Foundation Operations 权限升级$25k-$100k$25k-$100kNot DefinedOfficial Fix0.02CVE-2023-39017
2023-10-179.89.6Oracle Retail Bulk Data Integration BDI Job Scheduler 内存损坏$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-42920
2023-07-186.56.3Oracle Retail Service Backbone RSB Installation 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-37533
2023-07-186.56.3Oracle Retail Predictive Application Server RPAS Server 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
2023-07-186.56.3Oracle Retail Integration Bus RIB Kernal 拒绝服务$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20863
2023-07-186.56.2Oracle Retail Integration Bus RIB Kernal 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-37533

662 更多条目未显示

更多条目由 Oracle

Do you need the next level of professionalism?

Upgrade your account now!