9.8
CVE-2019-2904
- EPSS 14.26%
- Veröffentlicht 16.10.2019 18:15:27
- Zuletzt bearbeitet 21.11.2024 04:41:46
- Erkennungen
LoginVulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Testing Suite Version 12.5.0.3
Oracle ≫ Application Testing Suite Version 13.1.0.1
Oracle ≫ Application Testing Suite Version 13.2.0.1
Oracle ≫ Application Testing Suite Version 13.3.0.1
Oracle ≫ Banking Enterprise Collections Version 2.7.0
Oracle ≫ Banking Enterprise Collections Version 2.8.0
Oracle ≫ Banking Enterprise Originations Version 2.7.0
Oracle ≫ Banking Enterprise Originations Version 2.8.0
Oracle ≫ Banking Enterprise Product Manufacturing Version 2.7.0
Oracle ≫ Banking Enterprise Product Manufacturing Version 2.8.0
Oracle ≫ Banking Platform Version 2.4.0
Oracle ≫ Banking Platform Version 2.4.1
Oracle ≫ Banking Platform Version 2.5.0
Oracle ≫ Banking Platform Version 2.6.0
Oracle ≫ Banking Platform Version 2.6.1
Oracle ≫ Banking Platform Version 2.6.2
Oracle ≫ Banking Platform Version 2.7.0
Oracle ≫ Banking Platform Version 2.7.1
Oracle ≫ Banking Platform Version 2.9.0
Oracle ≫ Business Process Management Suite Version 12.2.1.3.0
Oracle ≫ Business Process Management Suite Version 12.2.1.4.0
Oracle ≫ Communications Diameter Signaling Router Version >= 8.0.0.0 <= 8.4.0.5
Oracle ≫ Communications Network Integrity Version >= 7.3.2 <= 7.3.6
Oracle ≫ Communications Service Broker Version 6.0
Oracle ≫ Communications Service Broker Version 6.1
Oracle ≫ Communications Services Gatekeeper Version 6.0
Oracle ≫ Communications Services Gatekeeper Version 6.1
Oracle ≫ Enterprise Repository Version 11.1.1.7.0
Oracle ≫ Financial Services Lending And Leasing Version >= 14.1.0 <= 14.2.0
Oracle ≫ Financial Services Lending And Leasing Version 12.5.0
Oracle ≫ Flexcube Private Banking Version 12.0.0
Oracle ≫ Flexcube Private Banking Version 12.1.0
Oracle ≫ Health Sciences Data Management Workbench Version 2.4
Oracle ≫ Health Sciences Data Management Workbench Version 2.5
Oracle ≫ Hyperion Planning Version 11.1.2.4
Oracle ≫ Rapid Planning Version 12.1.3
Oracle ≫ Retail Assortment Planning Version 15.0.3.0
Oracle ≫ Retail Assortment Planning Version 16.0.3.0
Oracle ≫ Retail Clearance Optimization Engine Version 13.4
Oracle ≫ Retail Clearance Optimization Engine Version 14.0.3
Oracle ≫ Retail Clearance Optimization Engine Version 14.0.5
Oracle ≫ Retail Markdown Optimization Version 13.4
Oracle ≫ Retail Sales Audit Version 15.0.3
Oracle ≫ Retail Sales Audit Version 16.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 14.26% | 0.961 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| Oracle | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
https://www.oracle.com/security-alerts/cpuapr2021.html
https://www.zerodayinitiative.com/advisories/ZDI-19-1024/