Lucene search
+L

611 matches found

CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•13 views

Oracle Fusion Middleware安全漏洞

Oracle Coherence is a JCache-compliant in-memory distributed data grid solution for clustered applications and application servers. unspecified vulnerabilities exist in the Core component of Oracle Coherence versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. vulnerability. An attacker could...

8.1CVSS8.5AI score0.01561EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•20 views

Oracle Coherence安全漏洞

Oracle Coherence is a JCache-compliant in-memory distributed data grid solution for clustered applications and application servers.Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 An unspecified vulnerability exists in the Core component. An attacker could exploit...

7.5CVSS5.7AI score0.01395EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•3 views

CVE-2021-2344: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

7.5CVSS5.7AI score0.01395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•1 views

CVE-2021-2371: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

7.5CVSS5.7AI score0.01174EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•2 views

CVE-2021-2428: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise...

8.1CVSS5.7AI score0.01561EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•20 views

Oracle Fusion Middleware安全漏洞

Oracle Coherence is a JCache-compliant in-memory distributed data grid solution for clustered applications and application servers.Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 An unspecified vulnerability exists in the Core component. An attacker could exploit...

7.5CVSS8.5AI score0.01174EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/05/19 12:00 a.m.•13 views

The vulnerability of the Core component of the Oracle Coherence data processing software allows a hacker to gain unauthorized access to the device.

The vulnerability of the Core component of the Oracle Coherence data processing software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

7.8CVSS7.5AI score0.01123EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2021/04/22 10:15 p.m.•28 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS0.01123EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/22 10:15 p.m.•8 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7.2AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/22 10:15 p.m.•10 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7AI score0.01123EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/04/22 9:53 p.m.•18 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS6.6AI score0.01123EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/22 9:53 p.m.•101 views

CVE-2021-2277

CVE-2021-2277 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to access data, per CVSS 3.1 Base Score 7.5 (Confidentiality). The vulner...

7.5CVSS7.5AI score0.01123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/22 9:53 p.m.•40 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/04/22 12:00 a.m.•119 views

Oracle Coherence (Apr 2021 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core...

7.5CVSS6.9AI score0.1726EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•3 views

CVE-2021-2277: Undefined Security Weakness

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS5.7AI score0.01123EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/21 12:00 a.m.•24 views

Oracle Coherence Input Validation Error Vulnerability (CNVD-2021-33847)

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

7.5CVSS6.8AI score0.01123EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•19 views

Oracle Coherence 输入验证错误漏洞

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

7.5CVSS8AI score0.01123EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
•added 2021/03/15 12:00 a.m.•39 views

Oracle Coherence Remote Code Execution (CVE-2020-14756)

An insecure deserialization vulnerability exists in Oracle Coherence. This vulnerability is due to a lack of deserialization filtering when Coherence ExternalizableLite classes are deserialized...

7.5CVSS8AI score0.74753EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
•added 2021/02/08 12:00 a.m.•15 views

The vulnerability of Core Components of the Oracle Coherence data processing software allows a hacker to gain full control over the application.

The vulnerability of Oracle Coherence’s software-based data processing components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application by using the IIOP and T3 network protocols...

10CVSS8.2AI score0.74753EPSS
SaveExploits4References2Affected Software2
GithubExploit
GithubExploit
•added 2021/01/27 1:24 a.m.•310 views

Exploit for CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class...

9.8CVSS8.3AI score0.97116EPSS
SaveExploits29
Rows per page
Query Builder