Octopus 漏洞

时间轴

类型

Not Defined45
Virtualization Software1
Firewall Software1

产品

Octopus Server21
Octopus Deploy21
Octopus Tentacle2
Octopus Deploay1
Octopus Windows Docker Image1

修正

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined39

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined47

访问向量

Not Defined0
Physical1
Local0
Adjacent31
Network15

身份验证

Not Defined0
High0
Low40
None7

用户交互

Not Defined0
Required10
None37

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤45
≤521
≤612
≤72
≤85
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤45
≤522
≤611
≤72
≤86
≤90
≤100

VulDB

≤10
≤20
≤31
≤423
≤59
≤68
≤75
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤53
≤614
≤74
≤86
≤92
≤103

CNA

≤10
≤20
≤30
≤40
≤52
≤62
≤70
≤80
≤91
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k20
<2k22
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k46
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (8): Deploay (1), Deploy (21), Deploy Server (1), Server (21), Server Web Request Proxy (1), Tentacle (2), Tentacle Agent (1), Windows Docker Image (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-04-184.34.2Octopus Server API Key 信息公开未知Not DefinedOfficial Fix0.000430.03CVE-2023-4509
2024-04-098.18.0Octopus Server Configuration 竞争条件未知Not DefinedOfficial Fix0.000430.00CVE-2024-2975
2023-12-144.94.9Octopus Server OpenID Client Secret 信息公开未知Not DefinedOfficial Fix0.000870.04CVE-2023-1904
2023-08-024.44.4Octopus Deploy Request 信息公开未知Not DefinedNot Defined0.000450.00CVE-2022-2416
2023-08-025.55.5Octopus Deploay Extension Endpoint 权限升级未知Not DefinedNot Defined0.000450.00CVE-2022-2346
2023-05-183.53.5Octopus Deploy 信息公开未知Not DefinedNot Defined0.000470.00CVE-2022-4870
2023-05-104.54.5Octopus Deploy ZIP File 拒绝服务未知Not DefinedNot Defined0.000440.00CVE-2022-4008
2023-05-024.44.4Octopus Deploy Variable Preview 信息公开未知Not DefinedNot Defined0.000470.00CVE-2023-2247
2023-04-194.44.4Octopus Deploy 跨网站脚本未知Not DefinedNot Defined0.000470.00CVE-2022-2507
2023-03-167.17.1Octopus Deploy Offline Package 权限升级未知Not DefinedNot Defined0.000940.00CVE-2022-4009

37 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 37 results.

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!