Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-21532

Опубликовано: 21 янв. 2025
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Analytics Desktop executes to compromise Oracle Analytics Desktop. Successful attacks of this vulnerability can result in takeover of Oracle Analytics Desktop. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oracle:analytics_desktop:*:*:*:*:*:*:*:*
Версия до 8.1.0 (исключая)

EPSS

Процентиль: 17%
0.00054
Низкий

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
github
около 1 года назад

Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Analytics Desktop executes to compromise Oracle Analytics Desktop. Successful attacks of this vulnerability can result in takeover of Oracle Analytics Desktop. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS3: 7.8
fstec
около 1 года назад

Уязвимость компонента Install программного средства бизнес-аналитики Oracle Analytics, позволяющая нарушителю получить привилегированный доступ к инфраструктуре

EPSS

Процентиль: 17%
0.00054
Низкий

7.8 High

CVSS3

Дефекты

CWE-276