9
CVE-2022-23307
- EPSS 0.88%
- Veröffentlicht 18.01.2022 16:15:08
- Zuletzt bearbeitet 21.11.2024 06:48:22
- Quelle security@apache.org
- Teams Watchlist Login
- Unerledigt Login
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Advanced Supply Chain Planning Version12.1
Oracle ≫ Advanced Supply Chain Planning Version12.2
Oracle ≫ Business Intelligence Version5.9.0.0.0 SwEditionenterprise
Oracle ≫ Business Intelligence Version12.2.1.3.0 SwEditionenterprise
Oracle ≫ Business Intelligence Version12.2.1.4.0 SwEditionenterprise
Oracle ≫ Business Process Management Suite Version12.2.1.3.0
Oracle ≫ Business Process Management Suite Version12.2.1.4.0
Oracle ≫ Communications Eagle Ftp Table Base Retrieval Version4.5
Oracle ≫ Communications Instant Messaging Server Version10.0.1.5.0
Oracle ≫ Communications Messaging Server Version8.1
Oracle ≫ Communications Network Integrity Version7.3.6
Oracle ≫ Communications Offline Mediation Controller Version < 12.0.0.4.4
Oracle ≫ Communications Offline Mediation Controller Version12.0.0.5.0
Oracle ≫ Communications Unified Inventory Management Version7.4.1
Oracle ≫ Communications Unified Inventory Management Version7.4.2
Oracle ≫ E-business Suite Cloud Manager And Cloud Backup Module Version < 2.2.1.1.1
Oracle ≫ E-business Suite Cloud Manager And Cloud Backup Module Version2.2.1.1.1
Oracle ≫ Enterprise Manager Base Platform Version13.4.0.0
Oracle ≫ Enterprise Manager Base Platform Version13.5.0.0
Oracle ≫ Financial Services Revenue Management And Billing Analytics Version2.7.0.0
Oracle ≫ Financial Services Revenue Management And Billing Analytics Version2.7.0.1
Oracle ≫ Financial Services Revenue Management And Billing Analytics Version2.8.0.0
Oracle ≫ Healthcare Foundation Version8.1.0
Oracle ≫ Hyperion Data Relationship Management Version < 11.2.8.0
Oracle ≫ Hyperion Infrastructure Technology Version < 11.2.8.0
Oracle ≫ Identity Management Suite Version12.2.1.3.0
Oracle ≫ Identity Management Suite Version12.2.1.4.0
Oracle ≫ Identity Manager Connector Version11.1.1.5.0
Oracle ≫ Jdeveloper Version12.2.1.3.0
Oracle ≫ Middleware Common Libraries And Tools Version12.2.1.4.0
Oracle ≫ Mysql Enterprise Monitor Version <= 8.0.29
Oracle ≫ Retail Extract Transform And Load Version13.2.5
Oracle ≫ Weblogic Server Version12.2.1.3.0
Oracle ≫ Weblogic Server Version12.2.1.4.0
Oracle ≫ Weblogic Server Version14.1.1.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.88% | 0.745 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9 | 8 | 10 |
AV:N/AC:L/Au:S/C:C/I:C/A:C
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.