Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

fstec логотип

BDU:2024-00496

Опубликовано: 16 янв. 2024
Источник: fstec
CVSS3: 7.4
CVSS2: 6.5
EPSS Низкий

Описание

Уязвимость компонента Infrastructure платформы бизнес-аналитики Oracle Financial Services Analytical Applications Infrastructure (OFSAAI) связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании

Вендор

Oracle Corp.

Наименование ПО

Financial Services Analytical Applications Infrastructure

Версия ПО

8.1.0 (Financial Services Analytical Applications Infrastructure)
8.1.1 (Financial Services Analytical Applications Infrastructure)
8.0.7 (Financial Services Analytical Applications Infrastructure)
8.0.8 (Financial Services Analytical Applications Infrastructure)
8.0.9 (Financial Services Analytical Applications Infrastructure)
8.1.2 (Financial Services Analytical Applications Infrastructure)

Тип ПО

Прикладное ПО информационных систем

Операционные системы и аппаратные платформы

-

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,5)
Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 7,4)

Возможные меры по устранению уязвимости

Использование рекомендаций:
https://www.oracle.com/security-alerts/cpujan2024.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 38%
0.00168
Низкий

7.4 High

CVSS3

6.5 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.4
nvd
около 2 лет назад

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Or

CVSS3: 7.4
github
около 2 лет назад

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of...

EPSS

Процентиль: 38%
0.00168
Низкий

7.4 High

CVSS3

6.5 Medium

CVSS2