Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-3786 (GCVE-0-2022-3786)
Vulnerability from cvelistv5 – Published: 2022-11-01 00:00 – Updated: 2026-04-14 08:58
VLAI
EPSS
Title
X.509 Email Address Variable Length Buffer Overflow
Summary
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.
Severity
No CVSS data available.
CWE
- Buffer overflow
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.openssl.org/news/secadv/20221101.txt | vendor-advisory |
| https://git.openssl.org/gitweb/?p=openssl.git;a=c… | patch |
Impacted products
Date Public
2022-11-01 00:00
Credits
Viktor Dukhovni
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-04T19:13:08.687Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "OpenSSL Advisory",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.openssl.org/news/secadv/20221101.txt"
},
{
"name": "3.0.7 git commit",
"tags": [
"patch",
"x_transferred"
],
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a"
},
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html"
},
{
"url": "https://www.kb.cert.org/vuls/id/794340"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-3786",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-23T13:26:54.639858Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-05T16:12:38.194Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "Calibre ICE",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2023.1",
"status": "affected",
"version": "V2022.4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "Mcenter",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V5.3.0",
"status": "affected",
"version": "V5.2.1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204RNA (HSR)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.2.8",
"status": "affected",
"version": "V3.2.7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204RNA (PRP)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.2.8",
"status": "affected",
"version": "V3.2.7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204RNA EEC (HSR)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.2.8",
"status": "affected",
"version": "V3.2.7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204RNA EEC (PRP)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.2.8",
"status": "affected",
"version": "V3.2.7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SCALANCE X204RNA EEC (PRP/HSR)",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.2.8",
"status": "affected",
"version": "V3.2.7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SICAM GridPass",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.20",
"status": "affected",
"version": "V1.80",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC RTLS Locating Manager",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V2.13.0.3",
"status": "affected",
"version": "V2.13.0.0",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-14T08:58:03.787Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-408105.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"lessThan": "3.0.7",
"status": "affected",
"version": "3.0.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Viktor Dukhovni"
}
],
"datePublic": "2022-11-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\u003c/p\u003e"
}
],
"value": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n"
}
],
"metrics": [
{
"format": "other",
"other": {
"content": {
"text": "HIGH"
},
"type": "https://www.openssl.org/policies/secpolicy.html#high"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Buffer overflow",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-11-04T07:28:32.835Z",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"name": "OpenSSL Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.openssl.org/news/secadv/20221101.txt"
},
{
"name": "3.0.7 git commit",
"tags": [
"patch"
],
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "X.509 Email Address Variable Length Buffer Overflow",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev",
"importer": "vulnxml2json5.py 2022-11-04 07:19:07.034873"
}
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2022-3786",
"datePublished": "2022-11-01T00:00:00.000Z",
"dateReserved": "2022-11-01T00:00:00.000Z",
"dateUpdated": "2026-04-14T08:58:03.787Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-3786",
"date": "2026-05-25",
"epss": "0.27298",
"percentile": "0.96475"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-3786\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2022-11-01T18:15:11.047\",\"lastModified\":\"2026-04-14T10:16:26.147\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\\n\\n\"},{\"lang\":\"es\",\"value\":\"Puede activarse una saturaci\u00f3n del b\u00fafer en la verificaci\u00f3n del certificado X.509, espec\u00edficamente en la verificaci\u00f3n de restricciones del nombre. Tenga en cuenta que esto ocurre despu\u00e9s de la verificaci\u00f3n de la firma de la cadena de certificados y requiere que una CA haya firmado un certificado malicioso o que la aplicaci\u00f3n contin\u00fae con la verificaci\u00f3n del certificado a pesar de no poder construir una ruta hacia un emisor confiable. Un atacante puede crear una direcci\u00f3n de correo electr\u00f3nico maliciosa en un certificado para desbordar una cantidad arbitraria de bytes que contengan el car\u00e1cter \\\".\\\" (decimal 46) en la pila de memoria. Este desbordamiento del b\u00fafer podr\u00eda provocar un bloqueo (provocando una denegaci\u00f3n de servicio). En un cliente TLS, esto se puede desencadenar conect\u00e1ndose a un servidor malicioso. En un servidor TLS, esto puede activarse si el servidor solicita la autenticaci\u00f3n del cliente y se conecta un cliente malicioso.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.7\",\"matchCriteriaId\":\"BE1F59CA-02F2-4374-A129-18713496B58B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"18.0.0\",\"versionEndExcluding\":\"18.11.0\",\"matchCriteriaId\":\"CAC42CA8-8B01-4A19-A83C-A7D4D08E5E43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:18.12.0:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"7B1F87EE-4E30-4832-BF01-8501E94380EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:19.0.0:*:*:*:-:*:*:*\",\"matchCriteriaId\":\"F568BBC5-0D8E-499C-9F3E-DDCE5F10F9D5\"}]}]}],\"references\":[{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20221101.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.kb.cert.org/vuls/id/794340\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.openssl.org/news/secadv/20221101.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-408105.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.openssl.org/news/secadv/20221101.txt\", \"name\": \"OpenSSL Advisory\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a\", \"name\": \"3.0.7 git commit\", \"tags\": [\"patch\", \"x_transferred\"]}, {\"url\": \"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html\"}, {\"url\": \"https://www.kb.cert.org/vuls/id/794340\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T19:13:08.687Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-3786\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-23T13:26:54.639858Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-120\", \"description\": \"CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-05T13:07:54.435Z\"}}], \"cna\": {\"title\": \"X.509 Email Address Variable Length Buffer Overflow\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"user\": \"00000000-0000-4000-9000-000000000000\", \"value\": \"Viktor Dukhovni\"}], \"metrics\": [{\"other\": {\"type\": \"https://www.openssl.org/policies/secpolicy.html#high\", \"content\": {\"text\": \"HIGH\"}}, \"format\": \"other\"}], \"affected\": [{\"vendor\": \"OpenSSL\", \"product\": \"OpenSSL\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.7\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2022-11-01T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.openssl.org/news/secadv/20221101.txt\", \"name\": \"OpenSSL Advisory\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a\", \"name\": \"3.0.7 git commit\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\", \"importer\": \"vulnxml2json5.py 2022-11-04 07:19:07.034873\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\\n\\n\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Buffer overflow\"}]}], \"providerMetadata\": {\"orgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"shortName\": \"openssl\", \"dateUpdated\": \"2022-11-04T07:28:32.835Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2022-3786\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-04T19:13:08.687Z\", \"dateReserved\": \"2022-11-01T00:00:00.000Z\", \"assignerOrgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"datePublished\": \"2022-11-01T00:00:00.000Z\", \"assignerShortName\": \"openssl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
ICSA-23-019-01
Vulnerability from csaf_cisa - Published: 2023-01-19 00:00 - Updated: 2023-01-19 00:00Summary
Hitachi Energy PCU400
Notes
CISA Disclaimer: This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation: Successful exploitation of these vulnerabilities could result in a denial-of-service condition on both the logging function of the device and its associated server.
Critical infrastructure sectors: Energy
Countries/areas deployed: Worldwide
Company headquarters location: Switzerland
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Exploitability: No known public exploits specifically target these vulnerabilities.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
PCU400: PCU400: Versions 9.3.0 and later up to but not including 9.3.8
Hitachi Energy / PCU400
|
>= 9.3.0 - but not including 9.3.8 |
Mitigation
Vendor Fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
PCU400: PCULogger tool: Version 1.0.1
Hitachi Energy / PCULogger tool
|
1.0.1 |
Mitigation
Vendor Fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
PCU400: PCU400: Versions 9.3.0 and later up to but not including 9.3.8
Hitachi Energy / PCU400
|
>= 9.3.0 - but not including 9.3.8 |
Mitigation
Vendor Fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
PCU400: PCULogger tool: Version 1.0.1
Hitachi Energy / PCULogger tool
|
1.0.1 |
Mitigation
Vendor Fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
References
6 references
Acknowledgments
Hitachi Energy
{
"document": {
"acknowledgments": [
{
"organization": "Hitachi Energy",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could result in a denial-of-service condition on both the logging function of the device and its associated server.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": " Energy",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": " Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": " Switzerland",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage at cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "No known public exploits specifically target these vulnerabilities.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-23-019-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-019-01.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-23-019-01 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-019-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
}
],
"title": "Hitachi Energy PCU400",
"tracking": {
"current_release_date": "2023-01-19T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-23-019-01",
"initial_release_date": "2023-01-19T00:00:00.000000Z",
"revision_history": [
{
"date": "2023-01-19T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e= 9.3.0 - but not including 9.3.8",
"product": {
"name": "PCU400: PCU400: Versions 9.3.0 and later up to but not including 9.3.8",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "PCU400"
},
{
"branches": [
{
"category": "product_version",
"name": "1.0.1",
"product": {
"name": "PCU400: PCULogger tool: Version 1.0.1",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "PCULogger tool"
}
],
"category": "vendor",
"name": "Hitachi Energy"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"cwe": {
"id": "CWE-1357",
"name": "Reliance on Insufficiently Trustworthy Component"
},
"notes": [
{
"category": "summary",
"text": "The affected versions of PCU400 rely on a version of OpenSSL that contains a buffer overflow vulnerability. A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. In PCU400, this vulnerability could be exploited if a malicious TLS certificate is used to secure communication between PCU400 and PCULogger. Successful exploitation may cause a denial-of-service of the PCU400 Logger and PCUCAG server.- Note: the issue is related to logging with the PCULogger tool. Otherwise, the PCU system is not impacted.-CVE-2022-3602 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3602"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Hitachi Energy has fixed the vulnerabilities in the following versions, and recommends users update their systems to the appropriate version:",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "vendor_fix",
"details": "PCU400: Version 9.3.8 or 9.4 or later",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "PCULogger: Version 1.1.0 or later",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Users should contact a Hitachi Energy representative for instructions on acquiring and installing the new versions.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Hitachi Energy encourages users to apply recommended security practices and firewall configurations. These practices include, but are not limited to:",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Protect process control systems from physical access by unauthorized personnel.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Do not allow process control systems to have direct connections to the Internet.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Separate process control systems from other networks by means of a firewall system that has a minimal number of ports exposed.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Apply security updates to installed software components.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Do not use process control systems for personal use, such as web browsing or checking emails.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Carefully scan portable computers and removable storage media for viruses before they are connected to a control system.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "For more information, see Hitachi Energy advisory 8DBD000137.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
],
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000137\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002"
]
}
]
},
{
"cve": "CVE-2022-3786",
"cwe": {
"id": "CWE-1357",
"name": "Reliance on Insufficiently Trustworthy Component"
},
"notes": [
{
"category": "summary",
"text": "The affected versions of PCU400 rely on a version of OpenSSL that contains a buffer overflow vulnerability. A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. In PCU400, this vulnerability could be exploited if a malicious TLS certificate is used to secure communication between PCU400 and PCULogger. Successful exploitation may cause a denial-of-service of the PCU400 Logger and PCUCAG server. - Note: the issue is related to logging with the PCULogger tool. Otherwise, the PCU system is not impacted.-CVE-2022-3786 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3786"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Hitachi Energy has fixed the vulnerabilities in the following versions, and recommends users update their systems to the appropriate version:",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "vendor_fix",
"details": "PCU400: Version 9.3.8 or 9.4 or later",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "PCULogger: Version 1.1.0 or later",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Users should contact a Hitachi Energy representative for instructions on acquiring and installing the new versions.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Hitachi Energy encourages users to apply recommended security practices and firewall configurations. These practices include, but are not limited to:",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Protect process control systems from physical access by unauthorized personnel.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Do not allow process control systems to have direct connections to the Internet.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Separate process control systems from other networks by means of a firewall system that has a minimal number of ports exposed.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Apply security updates to installed software components.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Do not use process control systems for personal use, such as web browsing or checking emails.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Carefully scan portable computers and removable storage media for viruses before they are connected to a control system.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "For more information, see Hitachi Energy advisory 8DBD000137.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
],
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000137\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002"
]
}
]
}
]
}
ICSA-23-229-01
Vulnerability from csaf_cisa - Published: 2023-08-17 06:00 - Updated: 2023-08-17 06:00Summary
ICONICS and Mitsubishi Electric Products
Notes
Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation: Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.
Critical infrastructure sectors: Critical Manufacturing
Countries/areas deployed: Worldwide
Company headquarters location: ICONICS is headquartered in the United States. Mitsubishi Electric is headquartered in Japan.
Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:
Recommended Practices: Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolating them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.
Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Recommended Practices: No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
5.9 (Medium)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2
ICONICS, Mitsubishi Electric / ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI
|
10.97.2 |
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
Mitigation
fix
Mitigation
Mitigation
fix
Mitigation
fix
|
References
15 references
Acknowledgments
ICONICS
{
"document": {
"acknowledgments": [
{
"organization": "ICONICS",
"summary": "reporting these vulnerabilities to CISA"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could result in information disclosure, denial-of-service, or remote code execution.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "ICONICS is headquartered in the United States. Mitsubishi Electric is headquartered in Japan.",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-23-229-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-229-01.json"
},
{
"category": "self",
"summary": "ICSA Advisory ICSA-23-229-01 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-229-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "ICONICS and Mitsubishi Electric Products",
"tracking": {
"current_release_date": "2023-08-17T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-23-229-01",
"initial_release_date": "2023-08-17T06:00:00.000000Z",
"revision_history": [
{
"date": "2023-08-17T06:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Initial Publication"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "10.97.2",
"product": {
"name": "ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI: 10.97.2",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI"
}
],
"category": "vendor",
"name": "ICONICS, Mitsubishi Electric"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A denial of service and potential crash vulnerability due to a buffer overrun condition exists in the OpenSSL library used in the ICONICS Suite. This vulnerability is in the X.509 certificate name constraint checking.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3602"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2022-3786",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to a buffer overrun condition exists in the OpenSSL library used in the ICONICS Suite. This vulnerability is in the X.509 certificate verification.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3786"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2022-4203",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A denial-of-service vulnerability due to an out of bounds read condition exists in the OpenSSL library used in the ICONICS Suite. This vulnerability is in the X.509 certificate verification.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4203"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2022-4304",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "An information disclosure vulnerability due to an observable timing discrepancy exists in the OpenSSL library used in the ICONICS Suite. This vulnerability is in the RSA decryption implementation.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4304"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2022-4450",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A denial of service and potential crash vulnerability due to a double free condition exists in the OpenSSL library used in the ICONICS Suite. This vulnerability is in the reading of a PEM file.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4450"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
},
{
"cve": "CVE-2023-0401",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A denial of service and potential crash vulnerability due to a NULL Pointer dereference exists in the OpenSSL library used in the ICONICS Suite. This vulnerability can occur when signatures are being verified.",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-0401"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Version 10.97.2 Critical Fixes Rollup 2 and later is not vulnerable to these exploits. ICONICS recommends that users of its products take the following mitigation steps:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Ensure the 10.97.2 Critical Fixes Rollup release is applied to version 10.97.2 systems.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "For systems that do not contain the patch/fix:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Do not use the BACnet/SC feature on a production system.",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric recommend updating the ICONICS Suite with the latest security patches as they become available. ICONICS Suite security patches may be found here (login required).",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://partners.iconics.com/Home.aspx"
},
{
"category": "mitigation",
"details": "ICONICS and Mitsubishi Electric are releasing security updates as critical fixes/rollups release. For more information, refer to the ICONICS whitepaper on security vulnerabilities, the most recent version of which can be found here.",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://iconics.com/About/Security/CERT"
},
{
"category": "mitigation",
"details": "Additional information about the security updates may also be found in Mitsubishi Electric\u0027s security advisories:",
"product_ids": [
"CSAFPID-0001"
]
},
{
"category": "mitigation",
"details": "Advisory 2022-014",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf"
},
{
"category": "mitigation",
"details": "Advisory 2023-009",
"product_ids": [
"CSAFPID-0001"
],
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-009_en.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001"
]
}
]
}
]
}
NCSC-2025-0123
Vulnerability from csaf_ncscnl - Published: 2025-04-16 08:37 - Updated: 2025-04-16 08:37Summary
Kwetsbaarheden verholpen in Oracle Database Producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Oracle heeft kwetsbaarheden verholpen in diverse Oracle Database Producten en subsystemen, zoals Oracle Server, NoSQL, TimesTen, Secure Backup en Essbase.
Interpretaties: De kwetsbaarheden stellen ongeauthenticeerde kwaadwillenden in staat om een Denial-of-Service te veroorzaken of om ongeautoriseerde toegang te verkrijgen tot gevoelige gegevens en gegevens te manipuleren. Subcomponenten als de RDBMS Listener, Java VM, en andere componenten zijn specifiek kwetsbaar, met CVSS-scores variërend van 5.3 tot 7.5, wat duidt op een gematigd tot hoog risico.
Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-385: Covert Timing Channel
CWE-347: Improper Verification of Cryptographic Signature
CWE-1286: Improper Validation of Syntactic Correctness of Input
CWE-125: Out-of-bounds Read
CWE-404: Improper Resource Shutdown or Release
CWE-400: Uncontrolled Resource Consumption
CWE-502: Deserialization of Untrusted Data
CWE-918: Server-Side Request Forgery (SSRF)
CWE-787: Out-of-bounds Write
CWE-20: Improper Input Validation
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-44: Path Equivalence: 'file.name' (Internal Dot)
CWE-226: Sensitive Information in Resource Not Removed Before Reuse
CWE-706: Use of Incorrectly-Resolved Name or Reference
CWE-669: Incorrect Resource Transfer Between Spheres
CWE-755: Improper Handling of Exceptional Conditions
CWE-178: Improper Handling of Case Sensitivity
CWE-193: Off-by-one Error
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-523: Unprotected Transport of Credentials
CWE-190: Integer Overflow or Wraparound
CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-285: Improper Authorization
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-284: Improper Access Control
CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-476: NULL Pointer Dereference
CWE-459: Incomplete Cleanup
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-674: Uncontrolled Recursion
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-122: Heap-based Buffer Overflow
CWE-121: Stack-based Buffer Overflow
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-269: Improper Privilege Management
CWE-287: Improper Authentication
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.3 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-20
- Improper Input Validation
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-1286
- Improper Validation of Syntactic Correctness of Input
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
CWE-787
- Out-of-bounds Write
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.1 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.2 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.2 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.9 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.4 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.1 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
10.0 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
8.6 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.9 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.7 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
9.8 (Critical)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.5 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
4.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.4 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.3 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
5.3 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
6.5 (Medium)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
7.4 (High)
Affected products
Known affected
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/22.1
Oracle / Oracle / Database Server
|
vers:unknown/22.1 | ||
|
vers:unknown/13.5.0.0
Oracle / Oracle / Enterprise Manager for Oracle Database
|
vers:unknown/13.5.0.0 | ||
|
vers:oracle/>=19.3|<=19.22
Oracle / Oracle Database Server
|
vers:oracle/>=19.3|<=19.22 | ||
|
vers:oracle/>=19.3|<=19.26
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*
|
vers:oracle/>=19.3|<=19.26 | |
|
vers:oracle/>=21.3|<=21.13
Oracle / Oracle Database Server
|
vers:oracle/>=21.3|<=21.13 | ||
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=21.4|<=21.16
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*
|
vers:oracle/>=21.4|<=21.16 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle Database Server / Oracle Database Server
|
cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/13.5.0.0
Oracle / Oracle Enterprise Manager for Oracle Database
|
vers:oracle/13.5.0.0 | ||
|
vers:oracle/1.5.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*
|
vers:oracle/1.5.0 | |
|
vers:oracle/1.6.0
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*
|
vers:oracle/1.6.0 | |
|
vers:oracle/1.6.1
Oracle / Oracle NoSQL Database / Oracle NoSQL Database
|
cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*
|
vers:oracle/1.6.1 | |
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0
Oracle / Oracle TimesTen In-Memory Database / Oracle TimesTen In-Memory Database
|
cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*
|
vers:oracle/>=22.1.1.1.0|<=22.1.1.30.0 | |
|
vers:semver/19.3|<=19.26
Oracle Corporation / Oracle Database Server
|
vers:semver/19.3|<=19.26 | ||
|
vers:semver/21.3|<=21.17
Oracle Corporation / Oracle Database Server
|
vers:semver/21.3|<=21.17 | ||
|
vers:semver/23.4|<=23.7
Oracle Corporation / Oracle Database Server
|
vers:semver/23.4|<=23.7 | ||
|
vers:oracle/25.1.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*
|
vers:oracle/25.1.0 | |
|
vers:oracle/25.2.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*
|
vers:oracle/25.2.0 | |
|
vers:oracle/>=23.8.0|<=23.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=23.8.0|<=23.11.0 | |
|
vers:oracle/>=24.1.0|<=24.11.0
Oracle / Oracle Autonomous Health Framework / Autonomous Health Framework
|
cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*
|
vers:oracle/>=24.1.0|<=24.11.0 | |
|
vers:oracle/21.7.1.0.0
Oracle / Oracle Essbase / Oracle Essbase
|
cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/21.7.1.0.0 | |
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle / GoldenGate
|
vers:unknown/>=19.1.0.0.0|<=19.26.0.0.250219 | ||
|
vers:unknown/>=21.3|<=21.17
Oracle / Oracle / GoldenGate
|
vers:unknown/>=21.3|<=21.17 | ||
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10
Oracle / Oracle GoldenGate / GoldenGate Stream Analytics
|
cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.10 | |
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.26.0.0.250219 | |
|
vers:oracle/>=21.3|<=21.17
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*
|
vers:oracle/>=21.3|<=21.17 | |
|
vers:oracle/>=23.4|<=23.7
Oracle / Oracle GoldenGate / Oracle GoldenGate
|
cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.7 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.18 | |
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*
|
vers:oracle/>=21.3.0.0.0|<=21.16.0.0.0 | |
|
vers:oracle/>=23.4|<=23.6
Oracle / Oracle GoldenGate / Oracle GoldenGate Big Data and Application Adapters
|
cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*
|
vers:oracle/>=23.4|<=23.6 | |
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7
Oracle / Oracle GoldenGate Stream Analytics
|
vers:oracle/>=19.1.0.0.0|<=19.1.0.0.7 | ||
|
vers:oracle/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:oracle/23.1 | ||
|
vers:oracle/<23.1
Oracle / Big Data Spatial and Graph
|
vers:oracle/<23.1 | ||
|
vers:unknown/2.0
Oracle / Big Data Spatial and Graph
|
cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*
|
vers:unknown/2.0 | |
|
vers:unknown/2.0
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/2.0 | ||
|
vers:unknown/20.2
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/20.2 | ||
|
vers:unknown/23.1
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/23.1
Oracle / Big Data Spatial and Graph
|
vers:unknown/23.1 | ||
|
vers:unknown/none
Oracle / Oracle / Big Data Spatial and Graph
|
vers:unknown/none | ||
|
vers:oracle/23.4.3
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*
|
vers:oracle/23.4.3 | |
|
vers:oracle/24.3.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*
|
vers:oracle/24.3.0 | |
|
vers:oracle/23.4.4
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*
|
vers:oracle/23.4.4 | |
|
vers:oracle/24.4.0
Oracle / Oracle Graph Server and Client / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*
|
vers:oracle/24.4.0 | |
|
vers:oracle/<=22.4.7
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=22.4.7 | |
|
vers:oracle/<=23.4.2
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=23.4.2 | |
|
vers:oracle/<=24.1.0
Oracle / Graph Server and Client
|
cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*
|
vers:oracle/<=24.1.0 | |
|
vers:oracle/3.0.6
Oracle / Oracle Big Data Spatial and Graph
|
cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*
|
vers:oracle/3.0.6 | |
|
vers:oracle/12.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.1 | |
|
vers:oracle/12.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.2 | |
|
vers:oracle/12.1.0.3
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*
|
vers:oracle/12.1.0.3 | |
|
vers:oracle/18.1.0.0
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.0 | |
|
vers:oracle/18.1.0.1
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.1 | |
|
vers:oracle/18.1.0.2
Oracle / Oracle Secure Backup / Oracle Secure Backup
|
cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*
|
vers:oracle/18.1.0.2 | |
|
vers:semver/12.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.1 | ||
|
vers:semver/12.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.2 | ||
|
vers:semver/12.1.0.3
Oracle Corporation / Oracle Secure Backup
|
vers:semver/12.1.0.3 | ||
|
vers:semver/18.1.0.0
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.0 | ||
|
vers:semver/18.1.0.1
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.1 | ||
|
vers:semver/18.1.0.2
Oracle Corporation / Oracle Secure Backup
|
vers:semver/18.1.0.2 |
References
58 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft kwetsbaarheden verholpen in diverse Oracle Database Producten en subsystemen, zoals Oracle Server, NoSQL, TimesTen, Secure Backup en Essbase.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen ongeauthenticeerde kwaadwillenden in staat om een Denial-of-Service te veroorzaken of om ongeautoriseerde toegang te verkrijgen tot gevoelige gegevens en gegevens te manipuleren. Subcomponenten als de RDBMS Listener, Java VM, en andere componenten zijn specifiek kwetsbaar, met CVSS-scores vari\u00ebrend van 5.3 tot 7.5, wat duidt op een gematigd tot hoog risico.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Validation of Syntactic Correctness of Input",
"title": "CWE-1286"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Path Equivalence: \u0027file.name\u0027 (Internal Dot)",
"title": "CWE-44"
},
{
"category": "general",
"text": "Sensitive Information in Resource Not Removed Before Reuse",
"title": "CWE-226"
},
{
"category": "general",
"text": "Use of Incorrectly-Resolved Name or Reference",
"title": "CWE-706"
},
{
"category": "general",
"text": "Incorrect Resource Transfer Between Spheres",
"title": "CWE-669"
},
{
"category": "general",
"text": "Improper Handling of Exceptional Conditions",
"title": "CWE-755"
},
{
"category": "general",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "Unprotected Transport of Credentials",
"title": "CWE-523"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Sensitive Cookie in HTTPS Session Without \u0027Secure\u0027 Attribute",
"title": "CWE-614"
},
{
"category": "general",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"title": "CWE-1321"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd; oracle",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Database Producten",
"tracking": {
"current_release_date": "2025-04-16T08:37:39.412900Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0123",
"initial_release_date": "2025-04-16T08:37:39.412900Z",
"revision_history": [
{
"date": "2025-04-16T08:37:39.412900Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/22.1",
"product": {
"name": "vers:unknown/22.1",
"product_id": "CSAFPID-1304603"
}
}
],
"category": "product_name",
"name": "Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/13.5.0.0",
"product": {
"name": "vers:unknown/13.5.0.0",
"product_id": "CSAFPID-1201359"
}
}
],
"category": "product_name",
"name": "Enterprise Manager for Oracle Database"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product": {
"name": "vers:unknown/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product_id": "CSAFPID-2698376"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:unknown/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698377"
}
}
],
"category": "product_name",
"name": "GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/23.1",
"product": {
"name": "vers:oracle/23.1",
"product_id": "CSAFPID-1238473"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-1237753"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/20.2",
"product": {
"name": "vers:unknown/20.2",
"product_id": "CSAFPID-1238475"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/23.1",
"product": {
"name": "vers:unknown/23.1",
"product_id": "CSAFPID-1296375"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/none",
"product": {
"name": "vers:unknown/none",
"product_id": "CSAFPID-1237603"
}
}
],
"category": "product_name",
"name": "Big Data Spatial and Graph"
}
],
"category": "product_family",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.3|\u003c=19.22",
"product": {
"name": "vers:oracle/\u003e=19.3|\u003c=19.22",
"product_id": "CSAFPID-1145825"
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.13",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.13",
"product_id": "CSAFPID-1145826"
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.3|\u003c=19.26",
"product": {
"name": "vers:oracle/\u003e=19.3|\u003c=19.26",
"product_id": "CSAFPID-2698969",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:19.3-19.26:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698968",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:21.3-21.17:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.4|\u003c=21.16",
"product": {
"name": "vers:oracle/\u003e=21.4|\u003c=21.16",
"product_id": "CSAFPID-1839905",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_workload_manager:21.4-21.16:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product_id": "CSAFPID-2698934",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:database_-_java_vm:23.4-23.7:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
}
],
"category": "product_family",
"name": "Oracle Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/13.5.0.0",
"product": {
"name": "vers:oracle/13.5.0.0",
"product_id": "CSAFPID-1144644"
}
}
],
"category": "product_name",
"name": "Oracle Enterprise Manager for Oracle Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/1.5.0",
"product": {
"name": "vers:oracle/1.5.0",
"product_id": "CSAFPID-2699002",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.5.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/1.6.0",
"product": {
"name": "vers:oracle/1.6.0",
"product_id": "CSAFPID-2699003",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.6.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/1.6.1",
"product": {
"name": "vers:oracle/1.6.1",
"product_id": "CSAFPID-2699004",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:nosql_database:1.6.1:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle NoSQL Database"
}
],
"category": "product_family",
"name": "Oracle NoSQL Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=22.1.1.1.0|\u003c=22.1.1.30.0",
"product": {
"name": "vers:oracle/\u003e=22.1.1.1.0|\u003c=22.1.1.30.0",
"product_id": "CSAFPID-2699053",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:timesten_in-memory_database:22.1.1.1.0-22.1.1.30.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle TimesTen In-Memory Database"
}
],
"category": "product_family",
"name": "Oracle TimesTen In-Memory Database"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/25.1.0",
"product": {
"name": "vers:oracle/25.1.0",
"product_id": "CSAFPID-2698932",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:25.1.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/25.2.0",
"product": {
"name": "vers:oracle/25.2.0",
"product_id": "CSAFPID-2698931",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:25.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.8.0|\u003c=23.11.0",
"product": {
"name": "vers:oracle/\u003e=23.8.0|\u003c=23.11.0",
"product_id": "CSAFPID-2698930",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:23.8.0-23.11.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=24.1.0|\u003c=24.11.0",
"product": {
"name": "vers:oracle/\u003e=24.1.0|\u003c=24.11.0",
"product_id": "CSAFPID-2698933",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:autonomous_health_framework:24.1.0-24.11.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Autonomous Health Framework"
}
],
"category": "product_family",
"name": "Oracle Autonomous Health Framework"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/21.7.1.0.0",
"product": {
"name": "vers:oracle/21.7.1.0.0",
"product_id": "CSAFPID-2698943",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:essbase:21.7.1.0.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Essbase"
}
],
"category": "product_family",
"name": "Oracle Essbase"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.10",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.10",
"product_id": "CSAFPID-2698949",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_stream_analytics:19.1.0.0.0-19.1.0.0.10:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "GoldenGate Stream Analytics"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.26.0.0.250219",
"product_id": "CSAFPID-2698941",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:19.1.0.0.0-19.26.0.0.250219:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product": {
"name": "vers:oracle/\u003e=21.3|\u003c=21.17",
"product_id": "CSAFPID-2698942",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:21.3-21.17:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.7",
"product_id": "CSAFPID-2699022",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate:23.4-23.7:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.18",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.18",
"product_id": "CSAFPID-1839977",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:19.1.0.0.0-19.1.0.0.18:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=21.3.0.0.0|\u003c=21.16.0.0.0",
"product": {
"name": "vers:oracle/\u003e=21.3.0.0.0|\u003c=21.16.0.0.0",
"product_id": "CSAFPID-1840034",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:21.3.0.0.0-21.16.0.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=23.4|\u003c=23.6",
"product": {
"name": "vers:oracle/\u003e=23.4|\u003c=23.6",
"product_id": "CSAFPID-1840035",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.4-23.6:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate Big Data and Application Adapters"
}
],
"category": "product_family",
"name": "Oracle GoldenGate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.7",
"product": {
"name": "vers:oracle/\u003e=19.1.0.0.0|\u003c=19.1.0.0.7",
"product_id": "CSAFPID-1144602"
}
}
],
"category": "product_name",
"name": "Oracle GoldenGate Stream Analytics"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003c23.1",
"product": {
"name": "vers:oracle/\u003c23.1",
"product_id": "CSAFPID-1145800"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/2.0",
"product": {
"name": "vers:unknown/2.0",
"product_id": "CSAFPID-356315",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ibm:oracle_big_data_spatial_and_graph:2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/23.1",
"product": {
"name": "vers:unknown/23.1",
"product_id": "CSAFPID-356152"
}
}
],
"category": "product_name",
"name": "Big Data Spatial and Graph"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/23.4.3",
"product": {
"name": "vers:oracle/23.4.3",
"product_id": "CSAFPID-2699065",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.3:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24.3.0",
"product": {
"name": "vers:oracle/24.3.0",
"product_id": "CSAFPID-2699066",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/23.4.4",
"product": {
"name": "vers:oracle/23.4.4",
"product_id": "CSAFPID-1840017",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.4:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24.4.0",
"product": {
"name": "vers:oracle/24.4.0",
"product_id": "CSAFPID-1840013",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.4.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Graph Server and Client"
}
],
"category": "product_family",
"name": "Oracle Graph Server and Client"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=22.4.7",
"product": {
"name": "vers:oracle/\u003c=22.4.7",
"product_id": "CSAFPID-1145419",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:22.4.7_and_prior:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=23.4.2",
"product": {
"name": "vers:oracle/\u003c=23.4.2",
"product_id": "CSAFPID-1145421",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:23.4.2_and_prior:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/\u003c=24.1.0",
"product": {
"name": "vers:oracle/\u003c=24.1.0",
"product_id": "CSAFPID-1145422",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graph_server_and_client:24.1.0_and_prior:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Graph Server and Client"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/3.0.6",
"product": {
"name": "vers:oracle/3.0.6",
"product_id": "CSAFPID-1145420",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:big_data_spatial_and_graph:3.0.6:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Big Data Spatial and Graph"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.1",
"product": {
"name": "vers:oracle/12.1.0.1",
"product_id": "CSAFPID-2699109",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.2",
"product": {
"name": "vers:oracle/12.1.0.2",
"product_id": "CSAFPID-2699107",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/12.1.0.3",
"product": {
"name": "vers:oracle/12.1.0.3",
"product_id": "CSAFPID-2699106",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:12.1.0.3:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.0",
"product": {
"name": "vers:oracle/18.1.0.0",
"product_id": "CSAFPID-2699110",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.1",
"product": {
"name": "vers:oracle/18.1.0.1",
"product_id": "CSAFPID-2698972",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/18.1.0.2",
"product": {
"name": "vers:oracle/18.1.0.2",
"product_id": "CSAFPID-2699108",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:secure_backup:18.1.0.2:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Secure Backup"
}
],
"category": "product_family",
"name": "Oracle Secure Backup"
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/19.3|\u003c=19.26",
"product": {
"name": "vers:semver/19.3|\u003c=19.26",
"product_id": "CSAFPID-2698485"
}
},
{
"category": "product_version_range",
"name": "vers:semver/21.3|\u003c=21.17",
"product": {
"name": "vers:semver/21.3|\u003c=21.17",
"product_id": "CSAFPID-2698486"
}
},
{
"category": "product_version_range",
"name": "vers:semver/23.4|\u003c=23.7",
"product": {
"name": "vers:semver/23.4|\u003c=23.7",
"product_id": "CSAFPID-2698487"
}
}
],
"category": "product_name",
"name": "Oracle Database Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.1",
"product": {
"name": "vers:semver/12.1.0.1",
"product_id": "CSAFPID-2698463"
}
},
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.2",
"product": {
"name": "vers:semver/12.1.0.2",
"product_id": "CSAFPID-2698464"
}
},
{
"category": "product_version_range",
"name": "vers:semver/12.1.0.3",
"product": {
"name": "vers:semver/12.1.0.3",
"product_id": "CSAFPID-2698465"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.0",
"product": {
"name": "vers:semver/18.1.0.0",
"product_id": "CSAFPID-2698466"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.1",
"product": {
"name": "vers:semver/18.1.0.1",
"product_id": "CSAFPID-2698467"
}
},
{
"category": "product_version_range",
"name": "vers:semver/18.1.0.2",
"product": {
"name": "vers:semver/18.1.0.2",
"product_id": "CSAFPID-2698468"
}
}
],
"category": "product_name",
"name": "Oracle Secure Backup"
}
],
"category": "vendor",
"name": "Oracle Corporation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-1935",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-1935",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1935.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-1935"
},
{
"cve": "CVE-2020-1938",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "other",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-1938",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1938.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-1938"
},
{
"cve": "CVE-2020-9484",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-9484",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-9484.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-9484"
},
{
"cve": "CVE-2020-11996",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-11996",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-11996.json"
}
],
"title": "CVE-2020-11996"
},
{
"cve": "CVE-2020-13935",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-13935",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-13935.json"
}
],
"title": "CVE-2020-13935"
},
{
"cve": "CVE-2020-13943",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-13943",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-13943.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-13943"
},
{
"cve": "CVE-2020-36843",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-36843",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-36843.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2020-36843"
},
{
"cve": "CVE-2021-24122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-24122",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-24122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-24122"
},
{
"cve": "CVE-2021-25122",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-25122",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-25122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-25122"
},
{
"cve": "CVE-2021-25329",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-25329",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-25329.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-25329"
},
{
"cve": "CVE-2021-30640",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "other",
"text": "Improper Authentication",
"title": "CWE-287"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-30640",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-30640.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-30640"
},
{
"cve": "CVE-2021-33037",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-33037",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-33037.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-33037"
},
{
"cve": "CVE-2021-41079",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-41079",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-41079.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-41079"
},
{
"cve": "CVE-2021-41184",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-41184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-41184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-41184"
},
{
"cve": "CVE-2021-42575",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-42575",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-42575.json"
}
],
"title": "CVE-2021-42575"
},
{
"cve": "CVE-2021-43980",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-43980",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-43980.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2021-43980"
},
{
"cve": "CVE-2022-3786",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "other",
"text": "Off-by-one Error",
"title": "CWE-193"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3786",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-3786.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-3786"
},
{
"cve": "CVE-2022-25762",
"cwe": {
"id": "CWE-226",
"name": "Sensitive Information in Resource Not Removed Before Reuse"
},
"notes": [
{
"category": "other",
"text": "Sensitive Information in Resource Not Removed Before Reuse",
"title": "CWE-226"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Improper Handling of Exceptional Conditions",
"title": "CWE-755"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-25762",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-25762.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-25762"
},
{
"cve": "CVE-2022-42252",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-42252",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-42252.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2022-42252"
},
{
"cve": "CVE-2023-28708",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "other",
"text": "Unprotected Transport of Credentials",
"title": "CWE-523"
},
{
"category": "other",
"text": "Sensitive Cookie in HTTPS Session Without \u0027Secure\u0027 Attribute",
"title": "CWE-614"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-28708",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28708.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-28708"
},
{
"cve": "CVE-2023-34053",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-34053",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-34053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-34053"
},
{
"cve": "CVE-2023-41080",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-41080",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-41080.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-41080"
},
{
"cve": "CVE-2023-42795",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-42795",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42795.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-42795"
},
{
"cve": "CVE-2023-44487",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-44487",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44487.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-44487"
},
{
"cve": "CVE-2023-45648",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-45648",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45648.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-45648"
},
{
"cve": "CVE-2023-46589",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-46589",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46589.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2023-46589"
},
{
"cve": "CVE-2024-6763",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Syntactic Correctness of Input",
"title": "CWE-1286"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6763",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6763.json"
}
],
"title": "CVE-2024-6763"
},
{
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-8176",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8176.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-8176"
},
{
"cve": "CVE-2024-8184",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-8184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8184.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-8184"
},
{
"cve": "CVE-2024-9143",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-9143",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9143.json"
}
],
"title": "CVE-2024-9143"
},
{
"cve": "CVE-2024-11053",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11053",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11053.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11053"
},
{
"cve": "CVE-2024-11233",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11233",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11233.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11233"
},
{
"cve": "CVE-2024-11234",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"title": "CWE-74"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11234",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11234.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11234"
},
{
"cve": "CVE-2024-11236",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-11236",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-11236.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-11236"
},
{
"cve": "CVE-2024-13176",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-13176",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-13176.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-13176"
},
{
"cve": "CVE-2024-23672",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "other",
"text": "Incomplete Cleanup",
"title": "CWE-459"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-23672",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23672.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-23672"
},
{
"cve": "CVE-2024-24549",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-24549",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24549.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-24549"
},
{
"cve": "CVE-2024-36114",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-36114",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36114.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-36114"
},
{
"cve": "CVE-2024-37891",
"cwe": {
"id": "CWE-669",
"name": "Incorrect Resource Transfer Between Spheres"
},
"notes": [
{
"category": "other",
"text": "Incorrect Resource Transfer Between Spheres",
"title": "CWE-669"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-37891",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37891.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-37891"
},
{
"cve": "CVE-2024-38819",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38819",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38819"
},
{
"cve": "CVE-2024-38820",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "other",
"text": "Improper Handling of Case Sensitivity",
"title": "CWE-178"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38820",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38820.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38820"
},
{
"cve": "CVE-2024-38999",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"title": "CWE-1321"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-38999",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-38999"
},
{
"cve": "CVE-2024-39338",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-39338",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39338.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-39338"
},
{
"cve": "CVE-2024-47554",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47554",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47554.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-47554"
},
{
"cve": "CVE-2024-47561",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47561",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47561.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-47561"
},
{
"cve": "CVE-2024-53382",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-53382",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53382.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-53382"
},
{
"cve": "CVE-2024-57699",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-57699",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-57699.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2024-57699"
},
{
"cve": "CVE-2025-21578",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-21578",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21578.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-21578"
},
{
"cve": "CVE-2025-24813",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "other",
"text": "Path Equivalence: \u0027file.name\u0027 (Internal Dot)",
"title": "CWE-44"
},
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "other",
"text": "Use of Incorrectly-Resolved Name or Reference",
"title": "CWE-706"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24813",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24813.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-24813"
},
{
"cve": "CVE-2025-24970",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24970",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24970.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-24970"
},
{
"cve": "CVE-2025-25193",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25193",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25193.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-25193"
},
{
"cve": "CVE-2025-26791",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-26791",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-26791.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-26791"
},
{
"cve": "CVE-2025-30694",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30694",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30694.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30694"
},
{
"cve": "CVE-2025-30701",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30701",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30701.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30701"
},
{
"cve": "CVE-2025-30702",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30702",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30702.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30702"
},
{
"cve": "CVE-2025-30733",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30733",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30733.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30733"
},
{
"cve": "CVE-2025-30736",
"product_status": {
"known_affected": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30736",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30736.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1304603",
"CSAFPID-1201359",
"CSAFPID-1145825",
"CSAFPID-2698969",
"CSAFPID-1145826",
"CSAFPID-2698968",
"CSAFPID-1839905",
"CSAFPID-2698934",
"CSAFPID-1144644",
"CSAFPID-2699002",
"CSAFPID-2699003",
"CSAFPID-2699004",
"CSAFPID-2699053",
"CSAFPID-2698485",
"CSAFPID-2698486",
"CSAFPID-2698487",
"CSAFPID-2698932",
"CSAFPID-2698931",
"CSAFPID-2698930",
"CSAFPID-2698933",
"CSAFPID-2698943",
"CSAFPID-2698376",
"CSAFPID-2698377",
"CSAFPID-2698949",
"CSAFPID-2698941",
"CSAFPID-2698942",
"CSAFPID-2699022",
"CSAFPID-1839977",
"CSAFPID-1840034",
"CSAFPID-1840035",
"CSAFPID-1144602",
"CSAFPID-1238473",
"CSAFPID-1145800",
"CSAFPID-356315",
"CSAFPID-1237753",
"CSAFPID-1238475",
"CSAFPID-1296375",
"CSAFPID-356152",
"CSAFPID-1237603",
"CSAFPID-2699065",
"CSAFPID-2699066",
"CSAFPID-1840017",
"CSAFPID-1840013",
"CSAFPID-1145419",
"CSAFPID-1145421",
"CSAFPID-1145422",
"CSAFPID-1145420",
"CSAFPID-2699109",
"CSAFPID-2699107",
"CSAFPID-2699106",
"CSAFPID-2699110",
"CSAFPID-2698972",
"CSAFPID-2699108",
"CSAFPID-2698463",
"CSAFPID-2698464",
"CSAFPID-2698465",
"CSAFPID-2698466",
"CSAFPID-2698467",
"CSAFPID-2698468"
]
}
],
"title": "CVE-2025-30736"
}
]
}
OPENSUSE-SU-2024:12469-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
cargo-audit-advisory-db-20221102-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: cargo-audit-advisory-db-20221102-1.1 on GA media
Description of the patch: These are all security issues fixed in the cargo-audit-advisory-db-20221102-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-12469
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.9 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cargo-audit-advisory-db-20221102-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the cargo-audit-advisory-db-20221102-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12469",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12469-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-36086 page",
"url": "https://www.suse.com/security/cve/CVE-2022-36086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
}
],
"title": "cargo-audit-advisory-db-20221102-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12469-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cargo-audit-advisory-db-20221102-1.1.aarch64",
"product": {
"name": "cargo-audit-advisory-db-20221102-1.1.aarch64",
"product_id": "cargo-audit-advisory-db-20221102-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-audit-advisory-db-20221102-1.1.ppc64le",
"product": {
"name": "cargo-audit-advisory-db-20221102-1.1.ppc64le",
"product_id": "cargo-audit-advisory-db-20221102-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-audit-advisory-db-20221102-1.1.s390x",
"product": {
"name": "cargo-audit-advisory-db-20221102-1.1.s390x",
"product_id": "cargo-audit-advisory-db-20221102-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-audit-advisory-db-20221102-1.1.x86_64",
"product": {
"name": "cargo-audit-advisory-db-20221102-1.1.x86_64",
"product_id": "cargo-audit-advisory-db-20221102-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-audit-advisory-db-20221102-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64"
},
"product_reference": "cargo-audit-advisory-db-20221102-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-audit-advisory-db-20221102-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le"
},
"product_reference": "cargo-audit-advisory-db-20221102-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-audit-advisory-db-20221102-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x"
},
"product_reference": "cargo-audit-advisory-db-20221102-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-audit-advisory-db-20221102-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
},
"product_reference": "cargo-audit-advisory-db-20221102-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-36086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-36086"
}
],
"notes": [
{
"category": "general",
"text": "linked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than `3 * size_of::\u003cusize\u003e` because of metadata write operations. This vulnerability impacts all the initialization functions on the `Heap` and `LockedHeap` types, including `Heap::new`, `Heap::init`, `Heap::init_from_slice`, and `LockedHeap::new`. It also affects multiple uses of the `Heap::extend` method. Version 0.10.2 contains a patch for the issue. As a workaround, ensure that the heap is only initialized with a size larger than `3 * size_of::\u003cusize\u003e` and that the `Heap::extend` method is only called with sizes larger than `2 * size_of::\u003cusize\u003e()`. Also, ensure that the total heap size is (and stays) a multiple of `2 * size_of::\u003cusize\u003e()`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-36086",
"url": "https://www.suse.com/security/cve/CVE-2022-36086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-36086"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.aarch64",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.ppc64le",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.s390x",
"openSUSE Tumbleweed:cargo-audit-advisory-db-20221102-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
}
]
}
OPENSUSE-SU-2024:12475-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
libopenssl-3-devel-3.0.7-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: libopenssl-3-devel-3.0.7-1.1 on GA media
Description of the patch: These are all security issues fixed in the libopenssl-3-devel-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-12475
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libopenssl-3-devel-3.0.7-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libopenssl-3-devel-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12475",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12475-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3358 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
}
],
"title": "libopenssl-3-devel-3.0.7-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12475-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.0.7-1.1.aarch64",
"product": {
"name": "libopenssl-3-devel-3.0.7-1.1.aarch64",
"product_id": "libopenssl-3-devel-3.0.7-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"product": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"product_id": "libopenssl-3-devel-32bit-3.0.7-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.0.7-1.1.aarch64",
"product": {
"name": "libopenssl3-3.0.7-1.1.aarch64",
"product_id": "libopenssl3-3.0.7-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl3-32bit-3.0.7-1.1.aarch64",
"product": {
"name": "libopenssl3-32bit-3.0.7-1.1.aarch64",
"product_id": "libopenssl3-32bit-3.0.7-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.0.7-1.1.aarch64",
"product": {
"name": "openssl-3-3.0.7-1.1.aarch64",
"product_id": "openssl-3-3.0.7-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-3-doc-3.0.7-1.1.aarch64",
"product": {
"name": "openssl-3-doc-3.0.7-1.1.aarch64",
"product_id": "openssl-3-doc-3.0.7-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.0.7-1.1.ppc64le",
"product": {
"name": "libopenssl-3-devel-3.0.7-1.1.ppc64le",
"product_id": "libopenssl-3-devel-3.0.7-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"product": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"product_id": "libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.0.7-1.1.ppc64le",
"product": {
"name": "libopenssl3-3.0.7-1.1.ppc64le",
"product_id": "libopenssl3-3.0.7-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl3-32bit-3.0.7-1.1.ppc64le",
"product": {
"name": "libopenssl3-32bit-3.0.7-1.1.ppc64le",
"product_id": "libopenssl3-32bit-3.0.7-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-3-3.0.7-1.1.ppc64le",
"product": {
"name": "openssl-3-3.0.7-1.1.ppc64le",
"product_id": "openssl-3-3.0.7-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-3-doc-3.0.7-1.1.ppc64le",
"product": {
"name": "openssl-3-doc-3.0.7-1.1.ppc64le",
"product_id": "openssl-3-doc-3.0.7-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.0.7-1.1.s390x",
"product": {
"name": "libopenssl-3-devel-3.0.7-1.1.s390x",
"product_id": "libopenssl-3-devel-3.0.7-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"product": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"product_id": "libopenssl-3-devel-32bit-3.0.7-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.0.7-1.1.s390x",
"product": {
"name": "libopenssl3-3.0.7-1.1.s390x",
"product_id": "libopenssl3-3.0.7-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl3-32bit-3.0.7-1.1.s390x",
"product": {
"name": "libopenssl3-32bit-3.0.7-1.1.s390x",
"product_id": "libopenssl3-32bit-3.0.7-1.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-3-3.0.7-1.1.s390x",
"product": {
"name": "openssl-3-3.0.7-1.1.s390x",
"product_id": "openssl-3-3.0.7-1.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-3-doc-3.0.7-1.1.s390x",
"product": {
"name": "openssl-3-doc-3.0.7-1.1.s390x",
"product_id": "openssl-3-doc-3.0.7-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.0.7-1.1.x86_64",
"product": {
"name": "libopenssl-3-devel-3.0.7-1.1.x86_64",
"product_id": "libopenssl-3-devel-3.0.7-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"product": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"product_id": "libopenssl-3-devel-32bit-3.0.7-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.0.7-1.1.x86_64",
"product": {
"name": "libopenssl3-3.0.7-1.1.x86_64",
"product_id": "libopenssl3-3.0.7-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl3-32bit-3.0.7-1.1.x86_64",
"product": {
"name": "libopenssl3-32bit-3.0.7-1.1.x86_64",
"product_id": "libopenssl3-32bit-3.0.7-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.0.7-1.1.x86_64",
"product": {
"name": "openssl-3-3.0.7-1.1.x86_64",
"product_id": "openssl-3-3.0.7-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-3-doc-3.0.7-1.1.x86_64",
"product": {
"name": "openssl-3-doc-3.0.7-1.1.x86_64",
"product_id": "openssl-3-doc-3.0.7-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64"
},
"product_reference": "libopenssl-3-devel-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le"
},
"product_reference": "libopenssl-3-devel-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x"
},
"product_reference": "libopenssl-3-devel-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64"
},
"product_reference": "libopenssl-3-devel-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64"
},
"product_reference": "libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le"
},
"product_reference": "libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x"
},
"product_reference": "libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-32bit-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64"
},
"product_reference": "libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64"
},
"product_reference": "libopenssl3-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le"
},
"product_reference": "libopenssl3-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x"
},
"product_reference": "libopenssl3-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64"
},
"product_reference": "libopenssl3-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-32bit-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64"
},
"product_reference": "libopenssl3-32bit-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-32bit-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le"
},
"product_reference": "libopenssl3-32bit-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-32bit-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x"
},
"product_reference": "libopenssl3-32bit-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-32bit-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64"
},
"product_reference": "libopenssl3-32bit-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64"
},
"product_reference": "openssl-3-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le"
},
"product_reference": "openssl-3-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x"
},
"product_reference": "openssl-3-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64"
},
"product_reference": "openssl-3-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-doc-3.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64"
},
"product_reference": "openssl-3-doc-3.0.7-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-doc-3.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le"
},
"product_reference": "openssl-3-doc-3.0.7-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-doc-3.0.7-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x"
},
"product_reference": "openssl-3-doc-3.0.7-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-doc-3.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
},
"product_reference": "openssl-3-doc-3.0.7-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3358"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialisation functions). Instead of using the custom cipher directly it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used in this way the OpenSSL encryption/decryption initialisation function will match the NULL cipher as being equivalent and will fetch this from the available providers. This will succeed if the default provider has been loaded (or if a third party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext. Applications are only affected by this issue if they call EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to an encryption/decryption initialisation function. Applications that only use SSL/TLS are not impacted by this issue. Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3358",
"url": "https://www.suse.com/security/cve/CVE-2022-3358"
},
{
"category": "external",
"summary": "SUSE Bug 1204226 for CVE-2022-3358",
"url": "https://bugzilla.suse.com/1204226"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-3358"
},
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:libopenssl3-32bit-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-3.0.7-1.1.x86_64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.aarch64",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.ppc64le",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.s390x",
"openSUSE Tumbleweed:openssl-3-doc-3.0.7-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
}
]
}
OPENSUSE-SU-2024:12479-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
python310-cryptography-38.0.3-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: python310-cryptography-38.0.3-1.1 on GA media
Description of the patch: These are all security issues fixed in the python310-cryptography-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-12479
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python310-cryptography-38.0.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python310-cryptography-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12479",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12479-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
}
],
"title": "python310-cryptography-38.0.3-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12479-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-38.0.3-1.1.aarch64",
"product": {
"name": "python310-cryptography-38.0.3-1.1.aarch64",
"product_id": "python310-cryptography-38.0.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python38-cryptography-38.0.3-1.1.aarch64",
"product": {
"name": "python38-cryptography-38.0.3-1.1.aarch64",
"product_id": "python38-cryptography-38.0.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python39-cryptography-38.0.3-1.1.aarch64",
"product": {
"name": "python39-cryptography-38.0.3-1.1.aarch64",
"product_id": "python39-cryptography-38.0.3-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-38.0.3-1.1.ppc64le",
"product": {
"name": "python310-cryptography-38.0.3-1.1.ppc64le",
"product_id": "python310-cryptography-38.0.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python38-cryptography-38.0.3-1.1.ppc64le",
"product": {
"name": "python38-cryptography-38.0.3-1.1.ppc64le",
"product_id": "python38-cryptography-38.0.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python39-cryptography-38.0.3-1.1.ppc64le",
"product": {
"name": "python39-cryptography-38.0.3-1.1.ppc64le",
"product_id": "python39-cryptography-38.0.3-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-38.0.3-1.1.s390x",
"product": {
"name": "python310-cryptography-38.0.3-1.1.s390x",
"product_id": "python310-cryptography-38.0.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python38-cryptography-38.0.3-1.1.s390x",
"product": {
"name": "python38-cryptography-38.0.3-1.1.s390x",
"product_id": "python38-cryptography-38.0.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python39-cryptography-38.0.3-1.1.s390x",
"product": {
"name": "python39-cryptography-38.0.3-1.1.s390x",
"product_id": "python39-cryptography-38.0.3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-38.0.3-1.1.x86_64",
"product": {
"name": "python310-cryptography-38.0.3-1.1.x86_64",
"product_id": "python310-cryptography-38.0.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python38-cryptography-38.0.3-1.1.x86_64",
"product": {
"name": "python38-cryptography-38.0.3-1.1.x86_64",
"product_id": "python38-cryptography-38.0.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python39-cryptography-38.0.3-1.1.x86_64",
"product": {
"name": "python39-cryptography-38.0.3-1.1.x86_64",
"product_id": "python39-cryptography-38.0.3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64"
},
"product_reference": "python310-cryptography-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le"
},
"product_reference": "python310-cryptography-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x"
},
"product_reference": "python310-cryptography-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64"
},
"product_reference": "python310-cryptography-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64"
},
"product_reference": "python38-cryptography-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le"
},
"product_reference": "python38-cryptography-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x"
},
"product_reference": "python38-cryptography-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64"
},
"product_reference": "python38-cryptography-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64"
},
"product_reference": "python39-cryptography-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le"
},
"product_reference": "python39-cryptography-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x"
},
"product_reference": "python39-cryptography-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
},
"product_reference": "python39-cryptography-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-38.0.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
}
]
}
OPENSUSE-SU-2024:12480-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
python310-cryptography-vectors-38.0.3-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: python310-cryptography-vectors-38.0.3-1.1 on GA media
Description of the patch: These are all security issues fixed in the python310-cryptography-vectors-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-12480
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python310-cryptography-vectors-38.0.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python310-cryptography-vectors-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-12480",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12480-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
}
],
"title": "python310-cryptography-vectors-38.0.3-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:12480-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-vectors-38.0.3-1.1.aarch64",
"product": {
"name": "python310-cryptography-vectors-38.0.3-1.1.aarch64",
"product_id": "python310-cryptography-vectors-38.0.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python38-cryptography-vectors-38.0.3-1.1.aarch64",
"product": {
"name": "python38-cryptography-vectors-38.0.3-1.1.aarch64",
"product_id": "python38-cryptography-vectors-38.0.3-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python39-cryptography-vectors-38.0.3-1.1.aarch64",
"product": {
"name": "python39-cryptography-vectors-38.0.3-1.1.aarch64",
"product_id": "python39-cryptography-vectors-38.0.3-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"product": {
"name": "python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"product_id": "python310-cryptography-vectors-38.0.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"product": {
"name": "python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"product_id": "python38-cryptography-vectors-38.0.3-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"product": {
"name": "python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"product_id": "python39-cryptography-vectors-38.0.3-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-vectors-38.0.3-1.1.s390x",
"product": {
"name": "python310-cryptography-vectors-38.0.3-1.1.s390x",
"product_id": "python310-cryptography-vectors-38.0.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python38-cryptography-vectors-38.0.3-1.1.s390x",
"product": {
"name": "python38-cryptography-vectors-38.0.3-1.1.s390x",
"product_id": "python38-cryptography-vectors-38.0.3-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python39-cryptography-vectors-38.0.3-1.1.s390x",
"product": {
"name": "python39-cryptography-vectors-38.0.3-1.1.s390x",
"product_id": "python39-cryptography-vectors-38.0.3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python310-cryptography-vectors-38.0.3-1.1.x86_64",
"product": {
"name": "python310-cryptography-vectors-38.0.3-1.1.x86_64",
"product_id": "python310-cryptography-vectors-38.0.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python38-cryptography-vectors-38.0.3-1.1.x86_64",
"product": {
"name": "python38-cryptography-vectors-38.0.3-1.1.x86_64",
"product_id": "python38-cryptography-vectors-38.0.3-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python39-cryptography-vectors-38.0.3-1.1.x86_64",
"product": {
"name": "python39-cryptography-vectors-38.0.3-1.1.x86_64",
"product_id": "python39-cryptography-vectors-38.0.3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-vectors-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64"
},
"product_reference": "python310-cryptography-vectors-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-vectors-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le"
},
"product_reference": "python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-vectors-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x"
},
"product_reference": "python310-cryptography-vectors-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python310-cryptography-vectors-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64"
},
"product_reference": "python310-cryptography-vectors-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-vectors-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64"
},
"product_reference": "python38-cryptography-vectors-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-vectors-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le"
},
"product_reference": "python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-vectors-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x"
},
"product_reference": "python38-cryptography-vectors-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-vectors-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64"
},
"product_reference": "python38-cryptography-vectors-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-vectors-38.0.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64"
},
"product_reference": "python39-cryptography-vectors-38.0.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-vectors-38.0.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le"
},
"product_reference": "python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-vectors-38.0.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x"
},
"product_reference": "python39-cryptography-vectors-38.0.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python39-cryptography-vectors-38.0.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
},
"product_reference": "python39-cryptography-vectors-38.0.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python310-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python38-cryptography-vectors-38.0.3-1.1.x86_64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.aarch64",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.ppc64le",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.s390x",
"openSUSE Tumbleweed:python39-cryptography-vectors-38.0.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
}
]
}
OPENSUSE-SU-2025:14739-1
Vulnerability from csaf_opensuse - Published: 2025-02-06 00:00 - Updated: 2025-02-06 00:00Summary
python311-cryptography-44.0.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: python311-cryptography-44.0.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the python311-cryptography-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2025-14739
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python311-cryptography-44.0.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python311-cryptography-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14739",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14739-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-23931 page",
"url": "https://www.suse.com/security/cve/CVE-2023-23931/"
}
],
"title": "python311-cryptography-44.0.0-1.1 on GA media",
"tracking": {
"current_release_date": "2025-02-06T00:00:00Z",
"generator": {
"date": "2025-02-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14739-1",
"initial_release_date": "2025-02-06T00:00:00Z",
"revision_history": [
{
"date": "2025-02-06T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-44.0.0-1.1.aarch64",
"product": {
"name": "python311-cryptography-44.0.0-1.1.aarch64",
"product_id": "python311-cryptography-44.0.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python312-cryptography-44.0.0-1.1.aarch64",
"product": {
"name": "python312-cryptography-44.0.0-1.1.aarch64",
"product_id": "python312-cryptography-44.0.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python313-cryptography-44.0.0-1.1.aarch64",
"product": {
"name": "python313-cryptography-44.0.0-1.1.aarch64",
"product_id": "python313-cryptography-44.0.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-44.0.0-1.1.ppc64le",
"product": {
"name": "python311-cryptography-44.0.0-1.1.ppc64le",
"product_id": "python311-cryptography-44.0.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python312-cryptography-44.0.0-1.1.ppc64le",
"product": {
"name": "python312-cryptography-44.0.0-1.1.ppc64le",
"product_id": "python312-cryptography-44.0.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python313-cryptography-44.0.0-1.1.ppc64le",
"product": {
"name": "python313-cryptography-44.0.0-1.1.ppc64le",
"product_id": "python313-cryptography-44.0.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-44.0.0-1.1.s390x",
"product": {
"name": "python311-cryptography-44.0.0-1.1.s390x",
"product_id": "python311-cryptography-44.0.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python312-cryptography-44.0.0-1.1.s390x",
"product": {
"name": "python312-cryptography-44.0.0-1.1.s390x",
"product_id": "python312-cryptography-44.0.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python313-cryptography-44.0.0-1.1.s390x",
"product": {
"name": "python313-cryptography-44.0.0-1.1.s390x",
"product_id": "python313-cryptography-44.0.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-44.0.0-1.1.x86_64",
"product": {
"name": "python311-cryptography-44.0.0-1.1.x86_64",
"product_id": "python311-cryptography-44.0.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python312-cryptography-44.0.0-1.1.x86_64",
"product": {
"name": "python312-cryptography-44.0.0-1.1.x86_64",
"product_id": "python312-cryptography-44.0.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python313-cryptography-44.0.0-1.1.x86_64",
"product": {
"name": "python313-cryptography-44.0.0-1.1.x86_64",
"product_id": "python313-cryptography-44.0.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64"
},
"product_reference": "python311-cryptography-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le"
},
"product_reference": "python311-cryptography-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x"
},
"product_reference": "python311-cryptography-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64"
},
"product_reference": "python311-cryptography-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64"
},
"product_reference": "python312-cryptography-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le"
},
"product_reference": "python312-cryptography-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x"
},
"product_reference": "python312-cryptography-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64"
},
"product_reference": "python312-cryptography-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64"
},
"product_reference": "python313-cryptography-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le"
},
"product_reference": "python313-cryptography-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x"
},
"product_reference": "python313-cryptography-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
},
"product_reference": "python313-cryptography-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
},
{
"cve": "CVE-2023-23931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-23931"
}
],
"notes": [
{
"category": "general",
"text": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-23931",
"url": "https://www.suse.com/security/cve/CVE-2023-23931"
},
{
"category": "external",
"summary": "SUSE Bug 1208036 for CVE-2023-23931",
"url": "https://bugzilla.suse.com/1208036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-44.0.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-23931"
}
]
}
OPENSUSE-SU-2025:14740-1
Vulnerability from csaf_opensuse - Published: 2025-02-06 00:00 - Updated: 2025-02-06 00:00Summary
python311-cryptography-vectors-44.0.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: python311-cryptography-vectors-44.0.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2025-14740
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.1 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python311-cryptography-vectors-44.0.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14740",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14740-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2025:14740-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYRT4L3ZDCZCJBPH7KDKJTBG4Z4CVCQS/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2025:14740-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BYRT4L3ZDCZCJBPH7KDKJTBG4Z4CVCQS/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3602 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-3786 page",
"url": "https://www.suse.com/security/cve/CVE-2022-3786/"
}
],
"title": "python311-cryptography-vectors-44.0.0-1.1 on GA media",
"tracking": {
"current_release_date": "2025-02-06T00:00:00Z",
"generator": {
"date": "2025-02-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14740-1",
"initial_release_date": "2025-02-06T00:00:00Z",
"revision_history": [
{
"date": "2025-02-06T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-vectors-44.0.0-1.1.aarch64",
"product": {
"name": "python311-cryptography-vectors-44.0.0-1.1.aarch64",
"product_id": "python311-cryptography-vectors-44.0.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python312-cryptography-vectors-44.0.0-1.1.aarch64",
"product": {
"name": "python312-cryptography-vectors-44.0.0-1.1.aarch64",
"product_id": "python312-cryptography-vectors-44.0.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python313-cryptography-vectors-44.0.0-1.1.aarch64",
"product": {
"name": "python313-cryptography-vectors-44.0.0-1.1.aarch64",
"product_id": "python313-cryptography-vectors-44.0.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"product": {
"name": "python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"product_id": "python311-cryptography-vectors-44.0.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"product": {
"name": "python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"product_id": "python312-cryptography-vectors-44.0.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"product": {
"name": "python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"product_id": "python313-cryptography-vectors-44.0.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-vectors-44.0.0-1.1.s390x",
"product": {
"name": "python311-cryptography-vectors-44.0.0-1.1.s390x",
"product_id": "python311-cryptography-vectors-44.0.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python312-cryptography-vectors-44.0.0-1.1.s390x",
"product": {
"name": "python312-cryptography-vectors-44.0.0-1.1.s390x",
"product_id": "python312-cryptography-vectors-44.0.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python313-cryptography-vectors-44.0.0-1.1.s390x",
"product": {
"name": "python313-cryptography-vectors-44.0.0-1.1.s390x",
"product_id": "python313-cryptography-vectors-44.0.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python311-cryptography-vectors-44.0.0-1.1.x86_64",
"product": {
"name": "python311-cryptography-vectors-44.0.0-1.1.x86_64",
"product_id": "python311-cryptography-vectors-44.0.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python312-cryptography-vectors-44.0.0-1.1.x86_64",
"product": {
"name": "python312-cryptography-vectors-44.0.0-1.1.x86_64",
"product_id": "python312-cryptography-vectors-44.0.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python313-cryptography-vectors-44.0.0-1.1.x86_64",
"product": {
"name": "python313-cryptography-vectors-44.0.0-1.1.x86_64",
"product_id": "python313-cryptography-vectors-44.0.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-vectors-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64"
},
"product_reference": "python311-cryptography-vectors-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-vectors-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le"
},
"product_reference": "python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-vectors-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x"
},
"product_reference": "python311-cryptography-vectors-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-cryptography-vectors-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64"
},
"product_reference": "python311-cryptography-vectors-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-vectors-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64"
},
"product_reference": "python312-cryptography-vectors-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-vectors-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le"
},
"product_reference": "python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-vectors-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x"
},
"product_reference": "python312-cryptography-vectors-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python312-cryptography-vectors-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64"
},
"product_reference": "python312-cryptography-vectors-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-vectors-44.0.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64"
},
"product_reference": "python313-cryptography-vectors-44.0.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-vectors-44.0.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le"
},
"product_reference": "python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-vectors-44.0.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x"
},
"product_reference": "python313-cryptography-vectors-44.0.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-cryptography-vectors-44.0.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
},
"product_reference": "python313-cryptography-vectors-44.0.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3602"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3602",
"url": "https://www.suse.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3602",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3602"
},
{
"cve": "CVE-2022-3786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-3786"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.\u0027 character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-3786",
"url": "https://www.suse.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "SUSE Bug 1204714 for CVE-2022-3786",
"url": "https://bugzilla.suse.com/1204714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python311-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python312-cryptography-vectors-44.0.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.s390x",
"openSUSE Tumbleweed:python313-cryptography-vectors-44.0.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-3786"
}
]
}
RHSA-2022:7288
Vulnerability from csaf_redhat - Published: 2022-11-01 18:40 - Updated: 2026-04-14 10:04Summary
Red Hat Security Advisory: openssl security update
Severity
Important
Notes
Topic: An update for openssl is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library.
Security Fix(es):
* OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602)
* OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack-based buffer overflow was found in the way OpenSSL processes X.509 certificates with a specially crafted email address field. This issue could cause a server or a client application compiled with OpenSSL to crash when trying to process the malicious certificate.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A stack-based buffer overflow was found in the way OpenSSL processes X.509 certificates with a specially crafted email address field. This issue could cause a server or a client application compiled with OpenSSL to crash or possibly execute remote code when trying to process the malicious certificate.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
17 references
Acknowledgments
Polar Bear
the OpenSSL project
Polar Bear
OpenSSL project
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openssl is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full strength general purpose cryptography library.\n\nSecurity Fix(es):\n\n* OpenSSL: X.509 Email Address Buffer Overflow (CVE-2022-3602)\n\n* OpenSSL: X.509 Email Address Variable Length Buffer Overflow (CVE-2022-3786)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:7288",
"url": "https://access.redhat.com/errata/RHSA-2022:7288"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/vulnerabilities/RHSB-2022-004",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2022-004"
},
{
"category": "external",
"summary": "2137723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2137723"
},
{
"category": "external",
"summary": "2139104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2139104"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7288.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2026-04-14T10:04:58+00:00",
"generator": {
"date": "2026-04-14T10:04:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2022:7288",
"initial_release_date": "2022-11-01T18:40:16+00:00",
"revision_history": [
{
"date": "2022-11-01T18:40:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-11-01T18:40:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-14T10:04:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.1-43.el9_0.src",
"product": {
"name": "openssl-1:3.0.1-43.el9_0.src",
"product_id": "openssl-1:3.0.1-43.el9_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.1-43.el9_0?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-libs-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-libs-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-devel-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-devel-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.1-43.el9_0.aarch64",
"product": {
"name": "openssl-perl-1:3.0.1-43.el9_0.aarch64",
"product_id": "openssl-perl-1:3.0.1-43.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.1-43.el9_0?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"product": {
"name": "openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"product_id": "openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.1-43.el9_0?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-libs-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-libs-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-devel-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-devel-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.1-43.el9_0.x86_64",
"product": {
"name": "openssl-perl-1:3.0.1-43.el9_0.x86_64",
"product_id": "openssl-perl-1:3.0.1-43.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.1-43.el9_0?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:3.0.1-43.el9_0.i686",
"product": {
"name": "openssl-libs-1:3.0.1-43.el9_0.i686",
"product_id": "openssl-libs-1:3.0.1-43.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.1-43.el9_0?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.1-43.el9_0.i686",
"product": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.i686",
"product_id": "openssl-debugsource-1:3.0.1-43.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.1-43.el9_0?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"product": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"product_id": "openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.1-43.el9_0?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"product_id": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.1-43.el9_0?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.1-43.el9_0.i686",
"product": {
"name": "openssl-devel-1:3.0.1-43.el9_0.i686",
"product_id": "openssl-devel-1:3.0.1-43.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.1-43.el9_0?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-libs-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-libs-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-devel-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-devel-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.1-43.el9_0.s390x",
"product": {
"name": "openssl-perl-1:3.0.1-43.el9_0.s390x",
"product_id": "openssl-perl-1:3.0.1-43.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.1-43.el9_0?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.src",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.src",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-devel-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-libs-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.aarch64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.s390x",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.1-43.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
},
"product_reference": "openssl-perl-1:3.0.1-43.el9_0.x86_64",
"relates_to_product_reference": "BaseOS-9.0.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
],
"organization": "Polar Bear",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2022-3602",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2022-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2137723"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way OpenSSL processes X.509 certificates with a specially crafted email address field. This issue could cause a server or a client application compiled with OpenSSL to crash when trying to process the malicious certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: X.509 Email Address Buffer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "As per upstream, the most common situation where this can be triggered is when a server requests client authentication after a malicious client connects. A client connecting to a malicious server is also believed to be vulnerable in the same manner. Only OpenSSL versions 3.0.0 to 3.0.6 are vulnerable to this attack.\nThe OpenSSL binaries in Red Hat Enterprise Linux 9 are compiled with Stack Smashing Protection. Also during the build process, the compiler rearranges the variables in a way that the buffer overflow is only able to overwrite the stack canaries, limiting the maximum impact of this flaw to denial of service. Remote code execution may not be possible in such cases.\n\nRed Hat OpenStack Platform 17 does not ship OpenSSL and is not directly affected by the flaw. However, container images which product ship are of RHEL 9 which were affected. RHOSP have fixed this by respining container images through the following errata: https://access.redhat.com/errata/RHBA-2022:7429",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-3602"
},
{
"category": "external",
"summary": "RHBZ#2137723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2137723"
},
{
"category": "external",
"summary": "RHSB-2022-004",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2022-004"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-3602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3602"
},
{
"category": "external",
"summary": "https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/",
"url": "https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20221101.txt",
"url": "https://www.openssl.org/news/secadv/20221101.txt"
}
],
"release_date": "2022-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-11-01T18:40:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:7288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenSSL: X.509 Email Address Buffer Overflow"
},
{
"acknowledgments": [
{
"names": [
"OpenSSL project"
],
"organization": "Polar Bear",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2022-3786",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2022-11-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2139104"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way OpenSSL processes X.509 certificates with a specially crafted email address field. This issue could cause a server or a client application compiled with OpenSSL to crash or possibly execute remote code when trying to process the malicious certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: X.509 Email Address Variable Length Buffer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "As per upstream, the most common situation where this can be triggered is when a server requests client authentication after a malicious client connects. A client connecting to a malicious server is also believed to be vulnerable in the same manner. Only OpenSSL versions 3.0.0 to 3.0.6 are vulnerable to this attack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-3786"
},
{
"category": "external",
"summary": "RHBZ#2139104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2139104"
},
{
"category": "external",
"summary": "RHSB-2022-004",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2022-004"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-3786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3786"
},
{
"category": "external",
"summary": "https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/",
"url": "https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20221101.txt",
"url": "https://www.openssl.org/news/secadv/20221101.txt"
}
],
"release_date": "2022-11-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-11-01T18:40:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:7288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"AppStream-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.src",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-debugsource-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-devel-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.i686",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-libs-debuginfo-1:3.0.1-43.el9_0.x86_64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.aarch64",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.ppc64le",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.s390x",
"BaseOS-9.0.0.Z.MAIN.EUS:openssl-perl-1:3.0.1-43.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenSSL: X.509 Email Address Variable Length Buffer Overflow"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…