Oracle Retail Open Commerce Platform 漏洞

时间轴

版本

5.35
6.05
6.0.15
5.3.04
6.0.04

修正

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network10

身份验证

Not Defined0
High0
Low2
None8

用户交互

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤73
≤81
≤91
≤103

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤63
≤72
≤81
≤91
≤103

VulDB

≤10
≤20
≤30
≤40
≤50
≤62
≤73
≤81
≤91
≤103

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤80
≤90
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

供应商

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤81
≤91
≤103

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k0
<10k1
<25k6
<50k0
<100k3
≥100k0

本日攻击

<1k7
<2k0
<5k0
<10k0
<25k3
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (13): 3.0, 4.0, 5.0, 5.1, 5.2, 5.3, 6, 6.0, 6.0.1, 6.1, 15.0, 15.1, 16.0

Link to Product Website: https://www.oracle.com

已发布BaseTemp漏洞0day今天易修正CTICVE
2018-10-166.86.7Oracle Retail Open Commerce Platform Integrations 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-3122
2018-10-168.78.5Oracle Retail Open Commerce Platform jackson-databind 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-15095
2018-10-169.89.7Oracle Retail Open Commerce Platform Spring Framework 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2018-1275
2018-10-169.79.6Oracle Retail Open Commerce Platform JasperReports 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2017-5533
2018-10-169.89.7Oracle Retail Open Commerce Platform Apache Log4j 权限升级$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2017-5645
2017-07-195.85.6Oracle Retail Open Commerce Platform Website 权限升级$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2017-10173
2017-07-196.15.8Oracle Retail Open Commerce Platform Framework 权限升级$5k-$25k计算Not DefinedOfficial Fix0.00CVE-2017-10172
2017-04-195.45.2Oracle Retail Open Commerce Platform Web 权限升级$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-3451
2017-04-197.57.2Oracle Retail Open Commerce Platform Framework 信息公开$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-7940
2015-10-206.56.2Oracle Retail Open Commerce Platform 未知漏洞$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-4827

更多条目由 Oracle

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!