Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-9484 (GCVE-0-2020-9484)
Vulnerability from cvelistv5 – Published: 2020-05-20 18:26 – Updated: 2024-08-04 10:26
VLAI
EPSS
Summary
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
Severity
No CVSS data available.
CWE
- Remote Code Execution
Assigner
References
42 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Apache Tomcat |
Affected:
Apache Tomcat 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54, 7.0.0 to 7.0.103
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.293Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "[tomcat-users] 20200521 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200523 [SECURITY] [DLA 2217-1] tomcat7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"name": "[tomcat-users] 20200524 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:0711",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"name": "[tomcat-dev] 20200527 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"name": "20200602 [CVE-2020-9484] Apache Tomcat RCE via PersistentManager",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"name": "GLSA-202006-21",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"name": "FEDORA-2020-ce396e7d5c",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"name": "FEDORA-2020-d9169235a8",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"name": "[tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200712 [SECURITY] [DLA 2279-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"name": "DSA-4727",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"name": "USN-4448-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"name": "[tomee-commits] 20201013 [jira] [Created] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Updated] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Assigned] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Commented] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"name": "USN-4596-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"name": "[tomcat-dev] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E"
},
{
"name": "[tomcat-users] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210301 svn commit: r1887027 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"name": "[tomee-commits] 20210522 [jira] [Closed] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "[tomcat-users] 20210701 What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210701 Re: What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210702 Re: CVE-2021-25329, was Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210712 svn commit: r1891484 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Apache Tomcat",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Apache Tomcat 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54, 7.0.0 to 7.0.103"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Remote Code Execution",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-25T16:24:10.000Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"name": "[tomcat-users] 20200521 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200523 [SECURITY] [DLA 2217-1] tomcat7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"name": "[tomcat-users] 20200524 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:0711",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"name": "[tomcat-dev] 20200527 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"name": "20200602 [CVE-2020-9484] Apache Tomcat RCE via PersistentManager",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"name": "GLSA-202006-21",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"name": "FEDORA-2020-ce396e7d5c",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"name": "FEDORA-2020-d9169235a8",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"name": "[tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200712 [SECURITY] [DLA 2279-1] tomcat8 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"name": "DSA-4727",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"name": "USN-4448-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"name": "[tomee-commits] 20201013 [jira] [Created] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Updated] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Assigned] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Commented] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"name": "USN-4596-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"name": "[tomcat-dev] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E"
},
{
"name": "[tomcat-users] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210301 svn commit: r1887027 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"name": "[tomee-commits] 20210522 [jira] [Closed] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "[tomcat-users] 20210701 What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210701 Re: What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210702 Re: CVE-2021-25329, was Re: Most recent security-related update to 8.5",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210712 svn commit: r1891484 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"ID": "CVE-2020-9484",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache Tomcat",
"version": {
"version_data": [
{
"version_value": "Apache Tomcat 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54, 7.0.0 to 7.0.103"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Remote Code Execution"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[tomcat-users] 20200521 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200523 [SECURITY] [DLA 2217-1] tomcat7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"name": "[tomcat-users] 20200524 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:0711",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"name": "[tomcat-dev] 20200527 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"name": "20200602 [CVE-2020-9484] Apache Tomcat RCE via PersistentManager",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"name": "GLSA-202006-21",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"name": "FEDORA-2020-ce396e7d5c",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"name": "FEDORA-2020-d9169235a8",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"name": "[tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200712 [SECURITY] [DLA 2279-1] tomcat8 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E",
"refsource": "MISC",
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200528-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"name": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"name": "DSA-4727",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"name": "USN-4448-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"name": "[tomee-commits] 20201013 [jira] [Created] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Updated] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Assigned] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Commented] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"name": "USN-4596-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"name": "[tomcat-dev] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.apache.org%3E"
},
{
"name": "[tomcat-users] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210301 svn commit: r1887027 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"name": "[tomee-commits] 20210522 [jira] [Closed] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "[tomcat-users] 20210701 What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210701 Re: What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210702 Re: CVE-2021-25329, was Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210712 svn commit: r1891484 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2020-9484",
"datePublished": "2020-05-20T18:26:41.000Z",
"dateReserved": "2020-03-01T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.293Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-9484",
"date": "2026-05-30",
"epss": "0.93464",
"percentile": "0.99829"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-9484\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2020-05-20T19:15:09.257\",\"lastModified\":\"2024-11-21T05:40:44.420\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\\\"null\\\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.\"},{\"lang\":\"es\",\"value\":\"Cuando se usa Apache Tomcat versiones 10.0.0-M1 hasta 10.0.0-M4, 9.0.0.M1 hasta 9.0.34, 8.5.0 hasta 8.5.54 y 7.0.0 hasta 7.0. 103, si a) un atacante es capaz de controlar el contenido y el nombre de un archivo en el servidor; y b) el servidor est\u00e1 configurado para usar el PersistenceManager con un FileStore; y c) el PersistenceManager est\u00e1 configurado con sessionAttributeValueClassNameFilter=\\\"null\\\" (el valor predeterminado a menos que se utilice un SecurityManager) o un filtro lo suficientemente laxo como para permitir que el objeto proporcionado por el atacante sea deserializado; y d) el atacante conoce la ruta relativa del archivo desde la ubicaci\u00f3n de almacenamiento usada por FileStore hasta el archivo sobre el que el atacante presenta control; entonces, mediante una petici\u00f3n espec\u00edficamente dise\u00f1ada, el atacante podr\u00e1 ser capaz de desencadenar una ejecuci\u00f3n de c\u00f3digo remota mediante la deserializaci\u00f3n del archivo bajo su control. Tome en cuenta que todas las condiciones desde la a) hasta la d) deben cumplirse para que el ataque tenga \u00e9xito.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":4.4,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.4,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.108\",\"matchCriteriaId\":\"EE5E91B0-1B3B-4871-ADD0-C772DA1894E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.5.0\",\"versionEndExcluding\":\"8.5.63\",\"matchCriteriaId\":\"6F32163D-F54D-48C9-AE9D-44ABA776B060\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.1\",\"versionEndExcluding\":\"9.0.43\",\"matchCriteriaId\":\"C570AD4E-B51D-4490-83B9-BFC8528514EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*\",\"matchCriteriaId\":\"89B129B2-FB6F-4EF9-BF12-E589A87996CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B6787B6-54A8-475E-BA1C-AB99334B2535\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*\",\"matchCriteriaId\":\"EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*\",\"matchCriteriaId\":\"E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A6DA0BE-908C-4DA8-A191-A0113235E99A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*\",\"matchCriteriaId\":\"39029C72-28B4-46A4-BFF5-EC822CFB2A4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A2E05A3-014F-4C4D-81E5-88E725FBD6AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*\",\"matchCriteriaId\":\"166C533C-0833-41D5-99B6-17A4FAB3CAF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3768C60-21FA-4B92-B98C-C3A2602D1BC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F542E12-6BA8-4504-A494-DA83E7E19BD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2409CC7-6A85-4A66-A457-0D62B9895DC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*\",\"matchCriteriaId\":\"B392A7E5-4455-4B1C-8FAC-AE6DDC70689E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF411DDA-2601-449A-9046-D250419A0E1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B4FBF97-DE16-4E5E-BE19-471E01818D40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B266B1E-24B5-47EE-A421-E0E3CC0C7471\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*\",\"matchCriteriaId\":\"29614C3A-6FB3-41C7-B56E-9CC3F45B04F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6AB156C-8FF6-4727-AF75-590D0DCB3F9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0C5F004-F7D8-45DB-B173-351C50B0EC16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1902D2E-1896-4D3D-9E1C-3A675255072C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*\",\"matchCriteriaId\":\"49AAF4DF-F61D-47A8-8788-A21E317A145D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*\",\"matchCriteriaId\":\"454211D0-60A2-4661-AECA-4C0121413FEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*\",\"matchCriteriaId\":\"0686F977-889F-4960-8E0B-7784B73A7F2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*\",\"matchCriteriaId\":\"558703AE-DB5E-4DFF-B497-C36694DD7B24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED6273F2-1165-47A4-8DD7-9E9B2472941B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*\",\"matchCriteriaId\":\"90CD7E85-4FF9-4158-AC78-4BFCBC882A65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7EA56B52-1015-40CD-B10C-393768094269\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*\",\"matchCriteriaId\":\"501B0D4A-D636-4736-979B-D5023599CEFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*\",\"matchCriteriaId\":\"94E7764F-BF9E-463E-B446-A9A8DB92BB97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"902B8056-9E37-443B-8905-8AA93E2447FB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80C9DBB8-3D50-4D5D-859A-B022EB7C2E64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D14ABF04-E460-4911-9C6C-B7BCEFE68E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED43772F-D280-42F6-A292-7198284D6FE7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C650FEDB-E903-4C2D-AD40-282AB5F2E3C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6B6FE82-7BFA-481D-99D6-789B146CA18B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4479F76A-4B67-41CC-98C7-C76B81050F8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0.0\",\"versionEndIncluding\":\"8.4.0.5\",\"matchCriteriaId\":\"12981AA7-BBF6-4158-8F7D-9DD3880FDCC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.2.0\",\"versionEndIncluding\":\"8.2.2\",\"matchCriteriaId\":\"B51F78F4-8D7E-48C2-86D1-D53A6EB348A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DB23B9A-571E-4B77-B432-23F3DC9B67D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.2.0\",\"versionEndIncluding\":\"8.2.2\",\"matchCriteriaId\":\"3E5416A1-EE58-415D-9645-B6A875EBAED2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.2.0\",\"versionEndIncluding\":\"8.2.2\",\"matchCriteriaId\":\"11B0C37E-D7C7-45F2-A8D8-5A3B1B191430\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"46E7237C-00BD-4490-96C3-A8EAE4CE2C0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"C1E05472-8F3A-4E46-90E5-50EA6D555FDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"02E34416-E767-4F61-8D2C-0D0202351F91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C5E9A12-BFE9-4963-A360-A34168A6BF6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:fmw_platform:12.2.1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA2E1357-E3A1-461C-B7A0-A9446E45496D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A3DC116-2844-47A1-BEC2-D0675DD97148\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.1\",\"versionEndIncluding\":\"17.3\",\"matchCriteriaId\":\"9A74FD5F-4FEA-4A74-8B92-72DFDE6BA464\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E3E923-E2AD-400D-A618-26ADF7F841A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9AB58D27-37F2-4A32-B786-3490024290A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.21\",\"matchCriteriaId\":\"70C60E6C-1A61-422B-A132-FB024761F576\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE8CF045-09BB-4069-BCEC-496D5AE3B780\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:siebel_apps_-_marketing:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.9\",\"matchCriteriaId\":\"7AACBCC9-FDAC-42DF-B931-BD908CAF5C65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20.12\",\"matchCriteriaId\":\"30DB69BD-0F6E-4AB5-A861-7CB911C35660\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A58642E0-CA59-4DE6-A83C-F551FC621C32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD848FE1-CFD7-490C-B008-DF3B30F3256F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"630C8E99-FE49-486E-9003-40B82809B7A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C842DE9E-5E12-4295-AFA5-DEB5FEDE490A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEB90C24-D252-4099-A7A1-9F8754DFB4A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"106FDF5A-D377-4E5F-8BF9-09290019C98A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B00DDE7-7002-45BE-8EDE-65D964922CB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DE847E0-431D-497D-9C57-C4E59749F6A0\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2020/Jun/6\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/03/01/2\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/\",\"source\":\"security@apache.org\"},{\"url\":\"https://security.gentoo.org/glsa/202006-21\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20200528-0005/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4448-1/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4596-1/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4727\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"security@apache.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2020.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2020/Jun/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/03/01/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202006-21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20200528-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4448-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4596-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4727\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}"
}
}
Title
Уязвимость компонента PersistenceManager сервера приложений Apache Tomcat, позволяющая нарушителю выполнить произвольный код
Description
Уязвимость компонента PersistenceManager сервера приложений Apache Tomcat связана с восстановлением в памяти недостоверных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с помощью специально созданного запроса
Severity
Vendor
Red Hat Inc., Oracle Corp., Novell Inc., Сообщество свободного программного обеспечения, Apache Software Foundation, Cisco Systems Inc., АО «ИВК», АО "НППКТ", АО «НТЦ ИТ РОСА», АО «Концерн ВНИИНС»
Software Name
Red Hat Enterprise Linux, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, OpenSUSE Leap, Jboss Fuse, Jboss Web Server, Debian GNU/Linux, OpenShift Application Runtimes, Tomcat, Hyperion Infrastructure Technology, Siebel UI Framework, Альт 8 СП (запись в едином реестре российских программ №4305), ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), РОСА ХРОМ (запись в едином реестре российских программ №1607), ОС ОН «Стрелец» (запись в едином реестре российских программ №6177)
Software Version
6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 15.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 17.3 (Instantis EnterpriseTrack), 6.2.1 (Agile Engineering Data Management), 8 (Red Hat Enterprise Linux), 15.1 (OpenSUSE Leap), 7 (Jboss Fuse), 3.1 for RHEL 7 (Jboss Web Server), 3.1 (Jboss Web Server), 3.1 for RHEL 6 (Jboss Web Server), 10 (Debian GNU/Linux), 1.0 (OpenShift Application Runtimes), 5.3 on RHEL 6 (Jboss Web Server), 5.3 on RHEL 7 (Jboss Web Server), 5.3 on RHEL 8 (Jboss Web Server), (JWS) 5.3 (Jboss Web Server), от 10.0.0-M1 до 10.0.0-M4 включительно (Tomcat), от 9.0.0.M1 до 9.0.34 включительно (Tomcat), от 8.5.0 до 8.5.54 включительно (Tomcat), от 7.0.0 до 7.0.103 включительно (Tomcat), 11.1.2.4 (Hyperion Infrastructure Technology), до 20.12 включительно (Siebel UI Framework), - (Альт 8 СП), до 2.6 (ОСОН ОСнова Оnyx), 12.4 (РОСА ХРОМ), до 16.01.2023 (ОС ОН «Стрелец»)
Possible Mitigations
Использование рекомендаций:
Для Apache Tomcat:
https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E
Для программных продуктов Oracle Corp.:
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2020-9484
Для Debian GNU/Linux:
https://www.debian.org/security/2020/dsa-4727
Для программных продуктов Novell Inc.:
https://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html
Для ОСОН ОСнова Оnyx:
Обновление программного обеспечения tomcat9 до версии 9.0.43+repack-2~deb11u4.osnova1
Для операционной системы РОСА ХРОМ: https://abf.rosalinux.ru/advisories/ROSA-SA-2023-2258
Для ОС ОН «Стрелец»:
Обновление программного обеспечения tomcat8 до версии 8.5.54-0+deb9u8
Для ОС Альт 8 СП: установка обновления из публичного репозитория программного средства: https://altsp.su/obnovleniya-bezopasnosti/
Reference
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html
http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html
http://seclists.org/fulldisclosure/2020/Jun/6
https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html
https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html
https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/
https://security.gentoo.org/glsa/202006-21
https://security.netapp.com/advisory/ntap-20200528-0005/
https://www.debian.org/security/2020/dsa-4727
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.6/
https://abf.rosalinux.ru/advisories/ROSA-SA-2023-2258
https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023
https://altsp.su/obnovleniya-bezopasnosti/
CWE
CWE-502
{
"CVSS 2.0": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat Inc., Oracle Corp., Novell Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Apache Software Foundation, Cisco Systems Inc., \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\", \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb, \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 15.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 17.3 (Instantis EnterpriseTrack), 6.2.1 (Agile Engineering Data Management), 8 (Red Hat Enterprise Linux), 15.1 (OpenSUSE Leap), 7 (Jboss Fuse), 3.1 for RHEL 7 (Jboss Web Server), 3.1 (Jboss Web Server), 3.1 for RHEL 6 (Jboss Web Server), 10 (Debian GNU/Linux), 1.0 (OpenShift Application Runtimes), 5.3 on RHEL 6 (Jboss Web Server), 5.3 on RHEL 7 (Jboss Web Server), 5.3 on RHEL 8 (Jboss Web Server), (JWS) 5.3 (Jboss Web Server), \u043e\u0442 10.0.0-M1 \u0434\u043e 10.0.0-M4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 9.0.0.M1 \u0434\u043e 9.0.34 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 8.5.0 \u0434\u043e 8.5.54 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 7.0.0 \u0434\u043e 7.0.103 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), 11.1.2.4 (Hyperion Infrastructure Technology), \u0434\u043e 20.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Siebel UI Framework), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), \u0434\u043e 2.6 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 12.4 (\u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Apache Tomcat:\nhttps://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle Corp.:\nhttps://www.oracle.com/security-alerts/cpujul2020.html\nhttps://www.oracle.com/security-alerts/cpujan2021.html\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2020-9484\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://www.debian.org/security/2020/dsa-4727\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Novell Inc.:\nhttps://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f tomcat9 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 9.0.43+repack-2~deb11u4.osnova1\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c: https://abf.rosalinux.ru/advisories/ROSA-SA-2023-2258\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f tomcat8 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 8.5.54-0+deb9u8\n\n\u0414\u043b\u044f \u041e\u0421 \u0410\u043b\u044c\u0442 8 \u0421\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430: https://altsp.su/obnovleniya-bezopasnosti/",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "20.05.2020",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.07.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "31.07.2020",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-03620",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-9484",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, OpenSUSE Leap, Jboss Fuse, Jboss Web Server, Debian GNU/Linux, OpenShift Application Runtimes, Tomcat, Hyperion Infrastructure Technology, Siebel UI Framework, \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161607), \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat Inc. Red Hat Enterprise Linux 6 , Red Hat Inc. Red Hat Enterprise Linux 7 , Red Hat Inc. Red Hat Enterprise Linux 8 , Novell Inc. OpenSUSE Leap 15.1 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.6 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c 12.4 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161607), \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PersistenceManager \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Apache Tomcat, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 PersistenceManager \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Apache Tomcat \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html \nhttp://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html \nhttp://seclists.org/fulldisclosure/2020/Jun/6 \nhttps://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E \nhttps://lists.debian.org/debian-lts-announce/2020/05/msg00020.html \nhttps://lists.debian.org/debian-lts-announce/2020/05/msg00026.html \nhttps://lists.debian.org/debian-lts-announce/2020/07/msg00010.html \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/ \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/ \nhttps://security.gentoo.org/glsa/202006-21 \nhttps://security.netapp.com/advisory/ntap-20200528-0005/ \nhttps://www.debian.org/security/2020/dsa-4727 \nhttps://www.oracle.com/security-alerts/cpujul2020.html\nhttps://www.oracle.com/security-alerts/cpujan2021.html\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.6/\nhttps://abf.rosalinux.ru/advisories/ROSA-SA-2023-2258\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023\nhttps://altsp.su/obnovleniya-bezopasnosti/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-502",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,9)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7)"
}
bit-tomcat-2020-9484
Vulnerability from bitnami_vulndb
Published
2024-03-06 11:10
Modified
2026-03-20 09:47
Summary
Details
When using Apache Tomcat versions 9.0.0 through 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
{
"affected": [
{
"package": {
"ecosystem": "Bitnami",
"name": "tomcat",
"purl": "pkg:bitnami/tomcat"
},
"ranges": [
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.108"
},
{
"introduced": "8.5.0"
},
{
"fixed": "8.5.63"
},
{
"introduced": "9.0.1"
},
{
"fixed": "9.0.43"
}
],
"type": "SEMVER"
}
],
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
],
"aliases": [
"CVE-2020-9484"
],
"database_specific": {
"cpes": [
"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*"
],
"severity": "High"
},
"details": "When using Apache Tomcat versions 9.0.0 through 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.",
"id": "BIT-tomcat-2020-9484",
"modified": "2026-03-20T09:47:33.381Z",
"published": "2024-03-06T11:10:32.165Z",
"references": [
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"type": "WEB",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9484"
}
],
"schema_version": "1.5.0"
}
CERTFR-2020-AVI-315
Vulnerability from certfr_avis - Published: 2020-05-25 - Updated: 2020-05-25
Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apache Tomcat versions 8.x ant\u00e9rieures \u00e0 8.5.55",
"product": {
"name": "Tomcat",
"vendor": {
"name": "Apache",
"scada": false
}
}
},
{
"description": "Apache Tomcat versions 7.x ant\u00e9rieures \u00e0 7.0.104",
"product": {
"name": "Tomcat",
"vendor": {
"name": "Apache",
"scada": false
}
}
},
{
"description": "Apache Tomcat versions 9.x ant\u00e9rieures \u00e0 9.0.35",
"product": {
"name": "Tomcat",
"vendor": {
"name": "Apache",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-9484",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9484"
}
],
"initial_release_date": "2020-05-25T00:00:00",
"last_revision_date": "2020-05-25T00:00:00",
"links": [],
"reference": "CERTFR-2020-AVI-315",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-05-25T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apache Tomcat. Elle permet \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apache Tomcat",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apache 8 du 11 mai 2020",
"url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.55"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apache 9 du 11 mai 2020",
"url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.35"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apache 7 du 16 mai 2020",
"url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.104"
}
]
}
CERTFR-2020-AVI-417
Vulnerability from certfr_avis - Published: 2020-07-09 - Updated: 2020-07-09
De multiples vulnérabilités ont été découvertes dans les produits Symantec. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SiteMinder versions ant\u00e9rieures \u00e0 12.8.04",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Symantec Endpoint Detection and Response (SEDR) versions ant\u00e9rieures \u00e0 4.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-9484",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9484"
},
{
"name": "CVE-2020-5839",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-5839"
}
],
"initial_release_date": "2020-07-09T00:00:00",
"last_revision_date": "2020-07-09T00:00:00",
"links": [],
"reference": "CERTFR-2020-AVI-417",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSymantec. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Symantec",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Symantec SYMSA16090 du 08 juillet 2020",
"url": "https://support.broadcom.com/security-advisory/content/0/0/SYMSA16090"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Symantec ESDSA16092 du 08 juillet 2020",
"url": "https://support.broadcom.com/security-advisory/content/0/0/ESDSA16092 "
}
]
}
CERTFR-2022-AVI-082
Vulnerability from certfr_avis - Published: 2022-01-26 - Updated: 2022-01-26
De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Elles permettent à un attaquant de provoquer une élévation de privilèges et une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apache Tomcat versions 8.x ant\u00e9rieures \u00e0 8.5.75",
"product": {
"name": "Tomcat",
"vendor": {
"name": "Apache",
"scada": false
}
}
},
{
"description": "Apache Tomcat versions 9.x ant\u00e9rieures \u00e0 9.0.58",
"product": {
"name": "Tomcat",
"vendor": {
"name": "Apache",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-23181",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23181"
},
{
"name": "CVE-2020-9484",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9484"
}
],
"initial_release_date": "2022-01-26T00:00:00",
"last_revision_date": "2022-01-26T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-082",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-01-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apache Tomcat.\nElles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges\net une ex\u00e9cution de code arbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apache Tomcat",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apache 8.5.75 du 20 janvier 2022",
"url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.75"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apache 9.0.58 du 20 janvier 2022",
"url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.58"
}
]
}
Title
ApacheTomcat代码问题漏洞
Description
Apache Tomcat是美国阿帕奇（Apache）软件基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat中存在安全漏洞。攻击者可通过控制服务器上文件的内容和名称等方法利用该漏洞执行代码。
Severity
中
Patch Name
ApacheTomcat代码问题漏洞的补丁
Patch Description
Apache Tomcat是美国阿帕奇（Apache）软件基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat中存在安全漏洞。攻击者可通过控制服务器上文件的内容和名称等方法利用该漏洞执行代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tomcat.apache.org/security.html
Reference
https://nvd.nist.gov/vuln/detail/CVE-2020-9484
Impacted products
| Name | ['Apache Tomcat >=10.0.0-M1，<=10.0.0-M4', 'Apache Tomcat >=9.0.0.0.M1，<=9.0.34', 'Apache Tomcat >=8.5.0，<=8.5.54', 'Apache Tomcat >=7.0.0，<=7.0.103'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2020-9484"
}
},
"description": "Apache Tomcat\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u8f7b\u91cf\u7ea7Web\u5e94\u7528\u670d\u52a1\u5668\u3002\u8be5\u7a0b\u5e8f\u5b9e\u73b0\u4e86\u5bf9Servlet\u548cJavaServer Page\uff08JSP\uff09\u7684\u652f\u6301\u3002\n\nApache Tomcat\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63a7\u5236\u670d\u52a1\u5668\u4e0a\u6587\u4ef6\u7684\u5185\u5bb9\u548c\u540d\u79f0\u7b49\u65b9\u6cd5\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://tomcat.apache.org/security.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2020-34449",
"openTime": "2020-06-23",
"patchDescription": "Apache Tomcat\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u8f7b\u91cf\u7ea7Web\u5e94\u7528\u670d\u52a1\u5668\u3002\u8be5\u7a0b\u5e8f\u5b9e\u73b0\u4e86\u5bf9Servlet\u548cJavaServer Page\uff08JSP\uff09\u7684\u652f\u6301\u3002\r\n\r\nApache Tomcat\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63a7\u5236\u670d\u52a1\u5668\u4e0a\u6587\u4ef6\u7684\u5185\u5bb9\u548c\u540d\u79f0\u7b49\u65b9\u6cd5\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "ApacheTomcat\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Apache Tomcat \u003e=10.0.0-M1\uff0c\u003c=10.0.0-M4",
"Apache Tomcat \u003e=9.0.0.0.M1\uff0c\u003c=9.0.34",
"Apache Tomcat \u003e=8.5.0\uff0c\u003c=8.5.54",
"Apache Tomcat \u003e=7.0.0\uff0c\u003c=7.0.103"
]
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-9484",
"serverity": "\u4e2d",
"submitTime": "2020-05-21",
"title": "ApacheTomcat\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e"
}
FKIE_CVE-2020-9484
Vulnerability from fkie_nvd - Published: 2020-05-20 19:15 - Updated: 2024-11-21 05:40
Severity
Summary
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EE5E91B0-1B3B-4871-ADD0-C772DA1894E6",
"versionEndExcluding": "7.0.108",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6F32163D-F54D-48C9-AE9D-44ABA776B060",
"versionEndExcluding": "8.5.63",
"versionStartIncluding": "8.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C570AD4E-B51D-4490-83B9-BFC8528514EF",
"versionEndExcluding": "9.0.43",
"versionStartIncluding": "9.0.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
"matchCriteriaId": "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
"matchCriteriaId": "89B129B2-FB6F-4EF9-BF12-E589A87996CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
"matchCriteriaId": "8B6787B6-54A8-475E-BA1C-AB99334B2535",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
"matchCriteriaId": "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
"matchCriteriaId": "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
"matchCriteriaId": "8A6DA0BE-908C-4DA8-A191-A0113235E99A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
"matchCriteriaId": "39029C72-28B4-46A4-BFF5-EC822CFB2A4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
"matchCriteriaId": "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
"matchCriteriaId": "166C533C-0833-41D5-99B6-17A4FAB3CAF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
"matchCriteriaId": "D3768C60-21FA-4B92-B98C-C3A2602D1BC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
"matchCriteriaId": "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
"matchCriteriaId": "9F542E12-6BA8-4504-A494-DA83E7E19BD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
"matchCriteriaId": "C2409CC7-6A85-4A66-A457-0D62B9895DC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
"matchCriteriaId": "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
"matchCriteriaId": "EF411DDA-2601-449A-9046-D250419A0E1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
"matchCriteriaId": "D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
"matchCriteriaId": "1B4FBF97-DE16-4E5E-BE19-471E01818D40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
"matchCriteriaId": "3B266B1E-24B5-47EE-A421-E0E3CC0C7471",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
"matchCriteriaId": "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
"matchCriteriaId": "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
"matchCriteriaId": "C0C5F004-F7D8-45DB-B173-351C50B0EC16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
"matchCriteriaId": "D1902D2E-1896-4D3D-9E1C-3A675255072C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
"matchCriteriaId": "49AAF4DF-F61D-47A8-8788-A21E317A145D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
"matchCriteriaId": "454211D0-60A2-4661-AECA-4C0121413FEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
"matchCriteriaId": "0686F977-889F-4960-8E0B-7784B73A7F2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
"matchCriteriaId": "558703AE-DB5E-4DFF-B497-C36694DD7B24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
"matchCriteriaId": "ED6273F2-1165-47A4-8DD7-9E9B2472941B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
"matchCriteriaId": "90CD7E85-4FF9-4158-AC78-4BFCBC882A65",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
"matchCriteriaId": "7EA56B52-1015-40CD-B10C-393768094269",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
"matchCriteriaId": "501B0D4A-D636-4736-979B-D5023599CEFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
"matchCriteriaId": "94E7764F-BF9E-463E-B446-A9A8DB92BB97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"matchCriteriaId": "80F0FA5D-8D3B-4C0E-81E2-87998286AF33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "902B8056-9E37-443B-8905-8AA93E2447FB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "80C9DBB8-3D50-4D5D-859A-B022EB7C2E64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D14ABF04-E460-4911-9C6C-B7BCEFE68E9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "ED43772F-D280-42F6-A292-7198284D6FE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B6B6FE82-7BFA-481D-99D6-789B146CA18B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4479F76A-4B67-41CC-98C7-C76B81050F8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
"matchCriteriaId": "12981AA7-BBF6-4158-8F7D-9DD3880FDCC1",
"versionEndIncluding": "8.4.0.5",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B51F78F4-8D7E-48C2-86D1-D53A6EB348A7",
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0DB23B9A-571E-4B77-B432-23F3DC9B67D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3E5416A1-EE58-415D-9645-B6A875EBAED2",
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "11B0C37E-D7C7-45F2-A8D8-5A3B1B191430",
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "46E7237C-00BD-4490-96C3-A8EAE4CE2C0B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "C1E05472-8F3A-4E46-90E5-50EA6D555FDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "02E34416-E767-4F61-8D2C-0D0202351F91",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9C5E9A12-BFE9-4963-A360-A34168A6BF6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:fmw_platform:12.2.1.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CA2E1357-E3A1-461C-B7A0-A9446E45496D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1A3DC116-2844-47A1-BEC2-D0675DD97148",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9A74FD5F-4FEA-4A74-8B92-72DFDE6BA464",
"versionEndIncluding": "17.3",
"versionStartIncluding": "17.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2E3E923-E2AD-400D-A618-26ADF7F841A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9AB58D27-37F2-4A32-B786-3490024290A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
"matchCriteriaId": "70C60E6C-1A61-422B-A132-FB024761F576",
"versionEndIncluding": "8.0.21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE8CF045-09BB-4069-BCEC-496D5AE3B780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:siebel_apps_-_marketing:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7AACBCC9-FDAC-42DF-B931-BD908CAF5C65",
"versionEndIncluding": "21.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30DB69BD-0F6E-4AB5-A861-7CB911C35660",
"versionEndIncluding": "20.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "A58642E0-CA59-4DE6-A83C-F551FC621C32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AD848FE1-CFD7-490C-B008-DF3B30F3256F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",
"matchCriteriaId": "630C8E99-FE49-486E-9003-40B82809B7A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",
"matchCriteriaId": "C842DE9E-5E12-4295-AFA5-DEB5FEDE490A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEB90C24-D252-4099-A7A1-9F8754DFB4A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "106FDF5A-D377-4E5F-8BF9-09290019C98A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"matchCriteriaId": "7B00DDE7-7002-45BE-8EDE-65D964922CB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"matchCriteriaId": "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"matchCriteriaId": "7DE847E0-431D-497D-9C57-C4E59749F6A0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed."
},
{
"lang": "es",
"value": "Cuando se usa Apache Tomcat versiones 10.0.0-M1 hasta 10.0.0-M4, 9.0.0.M1 hasta 9.0.34, 8.5.0 hasta 8.5.54 y 7.0.0 hasta 7.0. 103, si a) un atacante es capaz de controlar el contenido y el nombre de un archivo en el servidor; y b) el servidor est\u00e1 configurado para usar el PersistenceManager con un FileStore; y c) el PersistenceManager est\u00e1 configurado con sessionAttributeValueClassNameFilter=\"null\" (el valor predeterminado a menos que se utilice un SecurityManager) o un filtro lo suficientemente laxo como para permitir que el objeto proporcionado por el atacante sea deserializado; y d) el atacante conoce la ruta relativa del archivo desde la ubicaci\u00f3n de almacenamiento usada por FileStore hasta el archivo sobre el que el atacante presenta control; entonces, mediante una petici\u00f3n espec\u00edficamente dise\u00f1ada, el atacante podr\u00e1 ser capaz de desencadenar una ejecuci\u00f3n de c\u00f3digo remota mediante la deserializaci\u00f3n del archivo bajo su control. Tome en cuenta que todas las condiciones desde la a) hasta la d) deben cumplirse para que el ataque tenga \u00e9xito."
}
],
"id": "CVE-2020-9484",
"lastModified": "2024-11-21T05:40:44.420",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-05-20T19:15:09.257",
"references": [
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"source": "security@apache.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"source": "security@apache.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"tags": [
"Mailing List",
"Mitigation",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"source": "security@apache.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"source": "security@apache.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"source": "security@apache.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"source": "security@apache.org",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Mitigation",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119%40%3Ccommits.tomee.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
}
],
"sourceIdentifier": "security@apache.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-344F-F5VG-2JFJ
Vulnerability from github – Published: 2020-05-21 18:52 – Updated: 2026-05-20 21:58
VLAI
Summary
Potential remote code execution in Apache Tomcat
Details
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
Severity
7.0 (High)
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 10.0.0-M4"
},
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat-catalina"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0-M1"
},
{
"fixed": "10.0.0-M5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat-catalina"
},
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.35"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat-catalina"
},
"ranges": [
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.5.55"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat:tomcat-catalina"
},
"ranges": [
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.104"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 10.0.0-M4"
},
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat.embed:tomcat-embed-core"
},
"ranges": [
{
"events": [
{
"introduced": "10.0.0-M1"
},
{
"fixed": "10.0.0-M5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat.embed:tomcat-embed-core"
},
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.35"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat.embed:tomcat-embed-core"
},
"ranges": [
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.5.55"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Maven",
"name": "org.apache.tomcat.embed:tomcat-embed-core"
},
"ranges": [
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.104"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2020-9484"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": true,
"github_reviewed_at": "2020-05-21T17:21:20Z",
"nvd_published_at": "2020-05-20T19:15:00Z",
"severity": "HIGH"
},
"details": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.",
"id": "GHSA-344f-f5vg-2jfj",
"modified": "2026-05-20T21:58:43Z",
"published": "2020-05-21T18:52:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9484"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/3aa8f28db7efb311cdd1b6fe15a9cd3b167a2222.patch"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/4785433a226a20df6acbea49296e1ce7e23de453"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/6d66e99ef85da93e4d2c2a536ca51aa3418bfaf4"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/74b105657ffbd1d1de80455f03446c3bbf30d1f5"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/93f0cc403a9210d469afc2bd9cf03ab3251c6f35"
},
{
"type": "WEB",
"url": "https://github.com/apache/tomcat/commit/bb33048e3f9b4f2b70e4da2e6c4e34ca89023b1b"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-9.html"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-8.html"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-7.html"
},
{
"type": "WEB",
"url": "https://tomcat.apache.org/security-10.html"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20200528-0005"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"type": "WEB",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1171928"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4448-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4596-1"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"type": "WEB",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/tomcat"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c@%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c@%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f@%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3@%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119@%3Ccommits.tomee.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cdev.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cusers.tomcat.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Potential remote code execution in Apache Tomcat"
}
GSD-2020-9484
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2020-9484",
"description": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.",
"id": "GSD-2020-9484",
"references": [
"https://www.suse.com/security/cve/CVE-2020-9484.html",
"https://www.debian.org/security/2020/dsa-4727",
"https://access.redhat.com/errata/RHSA-2021:3140",
"https://access.redhat.com/errata/RHSA-2020:3017",
"https://access.redhat.com/errata/RHSA-2020:2530",
"https://access.redhat.com/errata/RHSA-2020:2529",
"https://access.redhat.com/errata/RHSA-2020:2509",
"https://access.redhat.com/errata/RHSA-2020:2506",
"https://access.redhat.com/errata/RHSA-2020:2487",
"https://access.redhat.com/errata/RHSA-2020:2483",
"https://ubuntu.com/security/CVE-2020-9484",
"https://advisories.mageia.org/CVE-2020-9484.html",
"https://security.archlinux.org/CVE-2020-9484",
"https://alas.aws.amazon.com/cve/html/CVE-2020-9484.html",
"https://linux.oracle.com/cve/CVE-2020-9484.html",
"https://packetstormsecurity.com/files/cve/CVE-2020-9484",
"https://access.redhat.com/errata/RHSA-2022:5532"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-9484"
],
"details": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.",
"id": "GSD-2020-9484",
"modified": "2023-12-13T01:21:52.829804Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"ID": "CVE-2020-9484",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache Tomcat",
"version": {
"version_data": [
{
"version_value": "Apache Tomcat 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54, 7.0.0 to 7.0.103"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Remote Code Execution"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[tomcat-users] 20200521 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200523 [SECURITY] [DLA 2217-1] tomcat7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"name": "[tomcat-users] 20200524 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:0711",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"name": "[tomcat-dev] 20200527 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"name": "20200602 [CVE-2020-9484] Apache Tomcat RCE via PersistentManager",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"name": "GLSA-202006-21",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"name": "FEDORA-2020-ce396e7d5c",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"name": "FEDORA-2020-d9169235a8",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"name": "[tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200712 [SECURITY] [DLA 2279-1] tomcat8 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E",
"refsource": "MISC",
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200528-0005/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"name": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"name": "DSA-4727",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"name": "USN-4448-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"name": "[tomee-commits] 20201013 [jira] [Created] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Updated] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Assigned] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Commented] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"name": "USN-4596-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"name": "[tomcat-dev] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.apache.org%3E"
},
{
"name": "[tomcat-users] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210301 svn commit: r1887027 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
"refsource": "MLIST",
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"name": "[tomee-commits] 20210522 [jira] [Closed] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "[tomcat-users] 20210701 What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210701 Re: What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210702 Re: CVE-2021-25329, was Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210712 svn commit: r1891484 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "[7.0.0,7.0.103],[8.5.0,8.5.54],[9.0.0,9.0.34],[10.0.0-M1,10.0.0-M4]",
"affected_versions": "All versions starting from 7.0.0 up to 7.0.103, all versions starting from 8.5.0 up to 8.5.54, all versions starting from 9.0.0 up to 9.0.34, all versions starting from 10.0.0-M1 up to 10.0.0-M4",
"cvss_v2": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"cvss_v3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-502",
"CWE-937"
],
"date": "2021-12-02",
"description": "When using Apache Tomcat, an attacker is able to control the contents and name of a file on the server.",
"fixed_versions": [
"7.0.104",
"8.5.55",
"9.0.35",
"10.0.0-M5"
],
"identifier": "CVE-2020-9484",
"identifiers": [
"CVE-2020-9484"
],
"not_impacted": "All versions before 7.0.0, all versions after 7.0.103 before 8.5.0, all versions after 8.5.54 before 9.0.0, all versions after 9.0.34 before 10.0.0, all versions after 10.0.0-M4",
"package_slug": "maven/org.apache.tomcat.embed/tomcat-embed-core",
"pubdate": "2020-05-20",
"solution": "Upgrade to versions 7.0.104, 8.5.55, 9.0.35, 10.0.0-M4 or above.",
"title": "Deserialization of Untrusted Data",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2020-9484"
],
"uuid": "7c092285-dc9f-4c2e-8192-92ab54f2489e"
},
{
"affected_range": "[7.0.0,7.0.103],[8.5.0,8.5.54],[9.0.0,9.0.34],[10.0.0]",
"affected_versions": "All versions starting from 7.0.0 up to 7.0.103, all versions starting from 8.5.0 up to 8.5.54, all versions starting from 9.0.0 up to 9.0.34, version 10.0.0",
"cvss_v2": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"cvss_v3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-502",
"CWE-937"
],
"date": "2020-10-27",
"description": "When using Apache Tomcat to M1 to to to if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the `PersistenceManager` with a `FileStore`; and c) the `PersistenceManager` is configured with `sessionAttributeValueClassNameFilter=\"null\"` (the default unless a `SecurityManager` is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by `FileStore` to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.",
"fixed_versions": [
"7.0.104",
"8.5.55",
"9.0.35"
],
"identifier": "CVE-2020-9484",
"identifiers": [
"CVE-2020-9484"
],
"not_impacted": "All versions before 7.0.0, all versions after 7.0.103 before 8.5.0, all versions after 8.5.54 before 9.0.0, all versions after 9.0.34 before 10.0.0, all versions after 10.0.0",
"package_slug": "maven/org.apache.tomcat/tomcat-catalina",
"pubdate": "2020-05-20",
"solution": "Upgrade to versions 7.0.104, 8.5.55, 9.0.35 or above.",
"title": "Deserialization of Untrusted Data",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2020-9484",
"http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
],
"uuid": "7fd2b075-2fa3-4e4f-b489-76492a9a5186"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "7.0.108",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "8.5.63",
"versionStartIncluding": "8.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "9.0.43",
"versionStartIncluding": "9.0.1",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "17.3",
"versionStartIncluding": "17.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.4.0.5",
"versionStartIncluding": "8.0.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "20.12",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.2.2",
"versionStartIncluding": "8.2.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "8.0.21",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:siebel_apps_-_marketing:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.9",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:fmw_platform:12.2.1.4.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"ID": "CVE-2020-9484"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E",
"refsource": "MISC",
"tags": [
"Mailing List",
"Mitigation",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20200521 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Mitigation",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf70f53af27e04869bdac18b1fc14a3ee529e59eb12292c8791a77926@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200523 [SECURITY] [DLA 2217-1] tomcat7 security update",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html"
},
{
"name": "[tomcat-users] 20200524 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "openSUSE-SU-2020:0711",
"refsource": "SUSE",
"tags": [
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html"
},
{
"name": "[tomcat-dev] 20200527 Re: [SECURITY] CVE-2020-9484 Apache Tomcat Remote Code Execution via session persistence",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "https://security.netapp.com/advisory/ntap-20200528-0005/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20200528-0005/"
},
{
"name": "[debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html"
},
{
"name": "20200602 [CVE-2020-9484] Apache Tomcat RCE via PersistentManager",
"refsource": "FULLDISC",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2020/Jun/6"
},
{
"name": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html",
"refsource": "MISC",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html"
},
{
"name": "GLSA-202006-21",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202006-21"
},
{
"name": "FEDORA-2020-ce396e7d5c",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJ7XHKWJWDNWXUJH6UB7CLIW4TWOZ26N/"
},
{
"name": "FEDORA-2020-d9169235a8",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIQHXENTLYUNOES4LXVNJ2NCUQQRF5VJ/"
},
{
"name": "[tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[debian-lts-announce] 20200712 [SECURITY] [DLA 2279-1] tomcat8 security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujul2020.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2020.html"
},
{
"name": "DSA-4727",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2020/dsa-4727"
},
{
"name": "USN-4448-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4448-1/"
},
{
"name": "[tomee-commits] 20201013 [jira] [Assigned] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc8473b08abdf3c16494ed817bec1717a0ee0c8080315bc27db5f21c3@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Updated] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/raa4123e472175bb052fbba165d37187cea923f755e8f3f30d124cb3f@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Created] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "[tomee-commits] 20201013 [jira] [Commented] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf59c72572b9fee674a5d5cc6afeca4ffc3918a02c354a81cc50b7119@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10332"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2020.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
},
{
"name": "USN-4596-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4596-1/"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2021.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"name": "[tomcat-dev] 20210301 svn commit: r1887027 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "[tomcat-announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.tomcat.apache.org%3E"
},
{
"name": "[announce] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.apache.org%3E"
},
{
"name": "[tomcat-users] 20210301 [SECURITY] CVE-2021-25329 Apache Tomcat Incomplete fix for CVE-2020-9484 (RCE via session persistence)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[oss-security] 20210301 CVE-2021-25329: Apache Tomcat Incomplete fix for CVE-2020-9484",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2021/03/01/2"
},
{
"name": "[tomee-commits] 20210522 [jira] [Closed] (TOMEE-2909) Impact of security vulnerability(CVE-2020-9484) on TOMEE plus (7.0.7)",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r8dd19c514face6dd85fd4eab0271854883f40c7307926c1f7cd5400c@%3Ccommits.tomee.apache.org%3E"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "[tomcat-users] 20210701 What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210701 Re: What is \"h2c\"? What is CVE-2021-25329? Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-users] 20210702 Re: CVE-2021-25329, was Re: Most recent security-related update to 8.5",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77@%3Cusers.tomcat.apache.org%3E"
},
{
"name": "[tomcat-dev] 20210712 svn commit: r1891484 - in /tomcat/site/trunk: docs/security-10.html docs/security-7.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-7.xml xdocs/security-8.xml xdocs/security-9.xml",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c@%3Cdev.tomcat.apache.org%3E"
},
{
"name": "N/A",
"refsource": "N/A",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "N/A",
"refsource": "N/A",
"tags": [],
"url": "https://www.oracle.com/security-alerts/cpujul2022.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
},
"lastModifiedDate": "2022-07-25T18:15Z",
"publishedDate": "2020-05-20T19:15Z"
}
}
}
NCSC-2025-0123
Vulnerability from csaf_ncscnl - Published: 2025-04-16 08:37 - Updated: 2025-04-16 08:37Summary
Kwetsbaarheden verholpen in Oracle Database Producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Oracle heeft kwetsbaarheden verholpen in diverse Oracle Database Producten en subsystemen, zoals Oracle Server, NoSQL, TimesTen, Secure Backup en Essbase.
Interpretaties: De kwetsbaarheden stellen ongeauthenticeerde kwaadwillenden in staat om een Denial-of-Service te veroorzaken of om ongeautoriseerde toegang te verkrijgen tot gevoelige gegevens en gegevens te manipuleren. Subcomponenten als de RDBMS Listener, Java VM, en andere componenten zijn specifiek kwetsbaar, met CVSS-scores variërend van 5.3 tot 7.5, wat duidt op een gematigd tot hoog risico.
Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-385: Covert Timing Channel
CWE-347: Improper Verification of Cryptographic Signature
CWE-1286: Improper Validation of Syntactic Correctness of Input
CWE-125: Out-of-bounds Read
CWE-404: Improper Resource Shutdown or Release
CWE-400: Uncontrolled Resource Consumption
CWE-502: Deserialization of Untrusted Data
CWE-918: Server-Side Request Forgery (SSRF)
CWE-787: Out-of-bounds Write
CWE-20: Improper Input Validation
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-44: Path Equivalence: 'file.name' (Internal Dot)
CWE-226: Sensitive Information in Resource Not Removed Before Reuse
CWE-706: Use of Incorrectly-Resolved Name or Reference
CWE-669: Incorrect Resource Transfer Between Spheres
CWE-755: Improper Handling of Exceptional Conditions
CWE-178: Improper Handling of Case Sensitivity
CWE-193: Off-by-one Error
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-523: Unprotected Transport of Credentials
CWE-190: Integer Overflow or Wraparound
CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-285: Improper Authorization
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-284: Improper Access Control
CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-476: NULL Pointer Dereference
CWE-459: Incomplete Cleanup
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-674: Uncontrolled Recursion
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-122: Heap-based Buffer Overflow
CWE-121: Stack-based Buffer Overflow
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-269: Improper Privilege Management
CWE-287: Improper Authentication
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.3 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-20
- Improper Input Validation
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-1286
- Improper Validation of Syntactic Correctness of Input
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-787
- Out-of-bounds Write
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.1 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.2 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.2 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.9 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.4 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.1 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
10.0 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.9 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.7 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.4 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.3 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.3 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.4 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
References
58 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft kwetsbaarheden verholpen in diverse Oracle Database Producten en subsystemen, zoals Oracle Server, NoSQL, TimesTen, Secure Backup en Essbase.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen ongeauthenticeerde kwaadwillenden in staat om een Denial-of-Service te veroorzaken of om ongeautoriseerde toegang te verkrijgen tot gevoelige gegevens en gegevens te manipuleren. Subcomponenten als de RDBMS Listener, Java VM, en andere componenten zijn specifiek kwetsbaar, met CVSS-scores vari\u00ebrend van 5.3 tot 7.5, wat duidt op een gematigd tot hoog risico.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Validation of Syntactic Correctness of Input",
"title": "CWE-1286"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Path Equivalence: \u0027file.name\u0027 (Internal Dot)",
"title": "CWE-44"
},
{
"category": "general",
"text": "Sensitive Information in Resource Not Removed Before Reuse",
"title": "CWE-226"
},
{
"category": "general",
"text": "Use of Incorrectly-Resolved Name or Reference",
"title": "CWE-706"
},
{
"category": "general",
"text": "Incorrect Resource Transfer Between Spheres",
"title": "CWE-669"
},
{
"category": "general",
"text": "Improper Handling of Exceptional Conditions",
"title": "CWE-755"
},
{
"category": "general",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "Unprotected Transport of Credentials",
"title": "CWE-523"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Sensitive Cookie in HTTPS Session Without \u0027Secure\u0027 Attribute",
"title": "CWE-614"
},
{
"category": "general",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"title": "CWE-1321"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd; oracle",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Database Producten",
"tracking": {
"current_release_date": "2025-04-16T08:37:39.412900Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0123",
"initial_release_date": "2025-04-16T08:37:39.412900Z",
"revision_history": [
{
"date": "2025-04-16T08:37:39.412900Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/22.1",
"product": {
"name": "vers:unknown/22.1",
"product_id": "CSAFPID-1304603"
}
}
],
"category": "product_name",
"name": "Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/13.5.0.0",
"product": {
"name": "vers:unknown/13.5.0.0",
"product_id": "CSAFPID-1201359"
}
}
],
"category": "product_name",
"name": "Enterprise Manager for Oracle Database"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product": {
"name": "vers:unknown/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product_id": "CSAFPID-2698376"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:unknown/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698377"
}
}
],
"category": "product_name",
"name": "GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/23.1",
"product": {
"name": "vers:oracle/23.1",
"product_id": "CSAFPID-1238473"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-1237753"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/20.2",
"product": {
"name": "vers:unknown/20.2",
"product_id": "CSAFPID-1238475"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/23.1",
"product": {
"name": "vers:unknown/23.1",
"product_id": "CSAFPID-1296375"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/none",
"product": {
"name": "vers:unknown/none",
"product_id": "CSAFPID-1237603"
}
}
],
"category": "product_name",
"name": "Big Data Spatial and Graph"
}
],
"category": "product_family",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.3|\u003c=19.22",
"product": {
"name": "vers:oracle/\u003e=19.3|\u003c=19.22",
"product_id": "CSAFPID-1145825"
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.13",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.13",
"product_id": "CSAFPID-1145826"
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.3|\u003c=19.26",
"product": {
"name": "vers:oracle/\u003e=19.3|\u003c=19.26",
"product_id": "CSAFPID-2698969",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698968",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.4|\u003c=21.16",
"product": {
"name": "vers:oracle/\u003e=21.4|\u003c=21.16",
"product_id": "CSAFPID-1839905",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product_id": "CSAFPID-2698934",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
}
],
"category": "product_family",
"name": "Oracle Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/13.5.0.0",
"product": {
"name": "vers:oracle/13.5.0.0",
"product_id": "CSAFPID-1144644"
}
}
],
"category": "product_name",
"name": "Oracle Enterprise Manager for Oracle Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/1.5.0",
"product": {
"name": "vers:oracle/1.5.0",
"product_id": "CSAFPID-2699002",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/1.6.0",
"product": {
"name": "vers:oracle/1.6.0",
"product_id": "CSAFPID-2699003",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/1.6.1",
"product": {
"name": "vers:oracle/1.6.1",
"product_id": "CSAFPID-2699004",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle NoSQL Database"
}
],
"category": "product_family",
"name": "Oracle NoSQL Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=22.1.1.1.0|\u003c=22.1.1.30.0",
"product": {
"name": "vers:oracle/\u003e=22.1.1.1.0|\u003c=22.1.1.30.0",
"product_id": "CSAFPID-2699053",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle TimesTen In-Memory Database"
}
],
"category": "product_family",
"name": "Oracle TimesTen In-Memory Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/25.1.0",
"product": {
"name": "vers:oracle/25.1.0",
"product_id": "CSAFPID-2698932",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/25.2.0",
"product": {
"name": "vers:oracle/25.2.0",
"product_id": "CSAFPID-2698931",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.8.0|\u003c=23.11.0",
"product": {
"name": "vers:oracle/\u003e=23.8.0|\u003c=23.11.0",
"product_id": "CSAFPID-2698930",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=24.1.0|\u003c=24.11.0",
"product": {
"name": "vers:oracle/\u003e=24.1.0|\u003c=24.11.0",
"product_id": "CSAFPID-2698933",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Autonomous Health Framework"
}
],
"category": "product_family",
"name": "Oracle Autonomous Health Framework"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/21.7.1.0.0",
"product": {
"name": "vers:oracle/21.7.1.0.0",
"product_id": "CSAFPID-2698943",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Essbase"
}
],
"category": "product_family",
"name": "Oracle Essbase"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.10",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.10",
"product_id": "CSAFPID-2698949",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "GoldenGate Stream Analytics"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product_id": "CSAFPID-2698941",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698942",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product_id": "CSAFPID-2699022",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.18",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.18",
"product_id": "CSAFPID-1839977",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3.0.0.0|\u003c=21.16.0.0.0",
"product": {
"name": "vers:oracle/\u003e=21.3.0.0.0|\u003c=21.16.0.0.0",
"product_id": "CSAFPID-1840034",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.6",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.6",
"product_id": "CSAFPID-1840035",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate Big Data and Application Adapters"
}
],
"category": "product_family",
"name": "Oracle GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.7",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.7",
"product_id": "CSAFPID-1144602"
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate Stream Analytics"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003c23.1",
"product": {
"name": "vers:oracle/\u003c23.1",
"product_id": "CSAFPID-1145800"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-356315",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/23.1",
"product": {
"name": "vers:unknown/23.1",
"product_id": "CSAFPID-356152"
}
}
],
"category": "product_name",
"name": "Big Data Spatial and Graph"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/23.4.3",
"product": {
"name": "vers:oracle/23.4.3",
"product_id": "CSAFPID-2699065",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24.3.0",
"product": {
"name": "vers:oracle/24.3.0",
"product_id": "CSAFPID-2699066",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/23.4.4",
"product": {
"name": "vers:oracle/23.4.4",
"product_id": "CSAFPID-1840017",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24.4.0",
"product": {
"name": "vers:oracle/24.4.0",
"product_id": "CSAFPID-1840013",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Graph Server and Client"
}
],
"category": "product_family",
"name": "Oracle Graph Server and Client"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=22.4.7",
"product": {
"name": "vers:oracle/\u003c=22.4.7",
"product_id": "CSAFPID-1145419",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=23.4.2",
"product": {
"name": "vers:oracle/\u003c=23.4.2",
"product_id": "CSAFPID-1145421",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=24.1.0",
"product": {
"name": "vers:oracle/\u003c=24.1.0",
"product_id": "CSAFPID-1145422",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Graph Server and Client"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/3.0.6",
"product": {
"name": "vers:oracle/3.0.6",
"product_id": "CSAFPID-1145420",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Big Data Spatial and Graph"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.1",
"product": {
"name": "vers:oracle/12.1.0.1",
"product_id": "CSAFPID-2699109",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.2",
"product": {
"name": "vers:oracle/12.1.0.2",
"product_id": "CSAFPID-2699107",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.3",
"product": {
"name": "vers:oracle/12.1.0.3",
"product_id": "CSAFPID-2699106",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.0",
"product": {
"name": "vers:oracle/18.1.0.0",
"product_id": "CSAFPID-2699110",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.1",
"product": {
"name": "vers:oracle/18.1.0.1",
"product_id": "CSAFPID-2698972",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.2",
"product": {
"name": "vers:oracle/18.1.0.2",
"product_id": "CSAFPID-2699108",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Secure Backup"
}
],
"category": "product_family",
"name": "Oracle Secure Backup"
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/19.3|\u003c=19.26",
"product": {
"name": "vers:semver/19.3|\u003c=19.26",
"product_id": "CSAFPID-2698485"
}
},
{
"category": "product_version_range",
"name": "vers:semver/21.3|\u003c=21.17",
"product": {
"name": "vers:semver/21.3|\u003c=21.17",
"product_id": "CSAFPID-2698486"
}
},
{
"category": "product_version_range",
"name": "vers:semver/23.4|\u003c=23.7",
"product": {
"name": "vers:semver/23.4|\u003c=23.7",
"product_id": "CSAFPID-2698487"
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.1",
"product": {
"name": "vers:semver/12.1.0.1",
"product_id": "CSAFPID-2698463"
}
},
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.2",
"product": {
"name": "vers:semver/12.1.0.2",
"product_id": "CSAFPID-2698464"
}
},
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.3",
"product": {
"name": "vers:semver/12.1.0.3",
"product_id": "CSAFPID-2698465"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.0",
"product": {
"name": "vers:semver/18.1.0.0",
"product_id": "CSAFPID-2698466"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.1",
"product": {
"name": "vers:semver/18.1.0.1",
"product_id": "CSAFPID-2698467"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.2",
"product": {
"name": "vers:semver/18.1.0.2",
"product_id": "CSAFPID-2698468"
}
}
],
"category": "product_name",
"name": "Oracle Secure Backup"
}
],
"category": "vendor",
"name": "Oracle Corporation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-1935",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-1935",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1935.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-1935"
},
{
"cve": "CVE-2020-1938",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "other",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-1938",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-1938"
},
{
"cve": "CVE-2020-9484",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-9484",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-9484.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-9484"
},
{
"cve": "CVE-2020-11996",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-11996",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-11996.json"
}
],
"title": "CVE-2020-11996"
},
{
"cve": "CVE-2020-13935",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-13935",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-13935.json"
}
],
"title": "CVE-2020-13935"
},
{
"cve": "CVE-2020-13943",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-13943",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-13943.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-13943"
},
{
"cve": "CVE-2020-36843",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-36843",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36843.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-36843"
},
{
"cve": "CVE-2021-24122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-24122",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-24122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-24122"
},
{
"cve": "CVE-2021-25122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-25122",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-25122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-25122"
},
{
"cve": "CVE-2021-25329",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-25329",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-25329.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-25329"
},
{
"cve": "CVE-2021-30640",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-30640",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-30640.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-30640"
},
{
"cve": "CVE-2021-33037",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-33037",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-33037.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-33037"
},
{
"cve": "CVE-2021-41079",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-41079",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-41079.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-41079"
},
{
"cve": "CVE-2021-41184",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-41184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-41184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-41184"
},
{
"cve": "CVE-2021-42575",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-42575",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-42575.json"
}
],
"title": "CVE-2021-42575"
},
{
"cve": "CVE-2021-43980",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-43980",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-43980.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-43980"
},
{
"cve": "CVE-2022-3786",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "other",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3786",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-3786.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-3786"
},
{
"cve": "CVE-2022-25762",
"cwe": {
"id": "CWE-226",
"name": "Sensitive Information in Resource Not Removed Before Reuse"
},
"notes": [
{
"category": "other",
"text": "Sensitive Information in Resource Not Removed Before Reuse",
"title": "CWE-226"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Improper Handling of Exceptional Conditions",
"title": "CWE-755"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-25762",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-25762.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-25762"
},
{
"cve": "CVE-2022-42252",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-42252",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42252.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-42252"
},
{
"cve": "CVE-2023-28708",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "other",
"text": "Unprotected Transport of Credentials",
"title": "CWE-523"
},
{
"category": "other",
"text": "Sensitive Cookie in HTTPS Session Without \u0027Secure\u0027 Attribute",
"title": "CWE-614"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-28708",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28708.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-28708"
},
{
"cve": "CVE-2023-34053",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-34053",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-34053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-34053"
},
{
"cve": "CVE-2023-41080",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-41080",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-41080.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-41080"
},
{
"cve": "CVE-2023-42795",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-42795",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42795.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-42795"
},
{
"cve": "CVE-2023-44487",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-44487",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44487.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-44487"
},
{
"cve": "CVE-2023-45648",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-45648",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45648.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-45648"
},
{
"cve": "CVE-2023-46589",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46589",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46589.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-46589"
},
{
"cve": "CVE-2024-6763",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Syntactic Correctness of Input",
"title": "CWE-1286"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6763",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6763.json"
}
],
"title": "CVE-2024-6763"
},
{
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-8176",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8176.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-8176"
},
{
"cve": "CVE-2024-8184",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-8184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-8184"
},
{
"cve": "CVE-2024-9143",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-9143",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9143.json"
}
],
"title": "CVE-2024-9143"
},
{
"cve": "CVE-2024-11053",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11053",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11053"
},
{
"cve": "CVE-2024-11233",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11233",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11233.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11233"
},
{
"cve": "CVE-2024-11234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11234",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11234"
},
{
"cve": "CVE-2024-11236",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11236",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11236.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11236"
},
{
"cve": "CVE-2024-13176",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-13176",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-13176.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-13176"
},
{
"cve": "CVE-2024-23672",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-23672",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23672.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-23672"
},
{
"cve": "CVE-2024-24549",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-24549",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24549.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-24549"
},
{
"cve": "CVE-2024-36114",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-36114",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36114.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-36114"
},
{
"cve": "CVE-2024-37891",
"cwe": {
"id": "CWE-669",
"name": "Incorrect Resource Transfer Between Spheres"
},
"notes": [
{
"category": "other",
"text": "Incorrect Resource Transfer Between Spheres",
"title": "CWE-669"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-37891",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37891.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-37891"
},
{
"cve": "CVE-2024-38819",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38819",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38819"
},
{
"cve": "CVE-2024-38820",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "other",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38820",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38820.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38820"
},
{
"cve": "CVE-2024-38999",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"title": "CWE-1321"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38999",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38999"
},
{
"cve": "CVE-2024-39338",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-39338",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39338.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-39338"
},
{
"cve": "CVE-2024-47554",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47554",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47554.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-47554"
},
{
"cve": "CVE-2024-47561",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47561",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47561.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-47561"
},
{
"cve": "CVE-2024-53382",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-53382",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53382.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-53382"
},
{
"cve": "CVE-2024-57699",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-57699",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-57699.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-57699"
},
{
"cve": "CVE-2025-21578",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-21578",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21578.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-21578"
},
{
"cve": "CVE-2025-24813",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "other",
"text": "Path Equivalence: \u0027file.name\u0027 (Internal Dot)",
"title": "CWE-44"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Use of Incorrectly-Resolved Name or Reference",
"title": "CWE-706"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24813",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24813.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-24813"
},
{
"cve": "CVE-2025-24970",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24970",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24970.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-24970"
},
{
"cve": "CVE-2025-25193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25193",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25193.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-25193"
},
{
"cve": "CVE-2025-26791",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26791",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26791.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-26791"
},
{
"cve": "CVE-2025-30694",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30694",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30694.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30694"
},
{
"cve": "CVE-2025-30701",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30701",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30701.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30701"
},
{
"cve": "CVE-2025-30702",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30702",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30702.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30702"
},
{
"cve": "CVE-2025-30733",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30733",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30733.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30733"
},
{
"cve": "CVE-2025-30736",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30736",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30736.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30736"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…