CVE-2020-14642

Опубликовано: 15 июл. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Ссылки

https://www.oracle.com/security-alerts/cpujul2020.html
Vendor Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:coherence:3.7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:coherence:12.1.3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:coherence:12.2.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:coherence:12.2.1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:coherence:14.1.1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01522

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-404

Связанные уязвимости

GHSA-4prf-w3jr-7gjh

github

больше 3 лет назад

BDU:2020-03708