Lucene search
+L

3315 matches found

OSV
OSV
•added 2021/01/20 3:15 p.m.•17 views

CVE-2021-2080

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7.3AI score0.01255EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/20 3:15 p.m.•32 views

CVE-2021-2079

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8AI score0.01255EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•8 views

CVE-2021-2079

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7AI score0.01255EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•10 views

CVE-2021-2078

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7AI score0.01255EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•8 views

CVE-2021-2080

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7AI score0.01255EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/01/20 3:15 p.m.•28 views

Buffer overflow

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

5.8CVSS8.3AI score0.01255EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/01/20 3:15 p.m.•28 views

Buffer overflow

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

5.8CVSS8.3AI score0.01255EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/20 2:50 p.m.•43 views

CVE-2021-2078

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8.4AI score0.01255EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/20 2:50 p.m.•72 views

CVE-2021-2079

CVE-2021-2079 affects Oracle Configurator (UI Servlet) in Oracle Supply Chain; impacted versions are 12.1 and 12.2. The issue enables network-accessible, unauthenticated access via HTTP, with user interaction required to exploit and potential for unauthorized data access and data modification. Ro...

8.2CVSS8.3AI score0.01255EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/01/20 2:50 p.m.•75 views

CVE-2021-2080

CVE-2021-2080 affects Oracle Configurator (UI Servlet) in Oracle Supply Chain, specifically versions 12.1 and 12.2. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker; however, successful attacks require human interaction. Impact includes unauthorized access to c...

8.2CVSS8.3AI score0.01255EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/20 2:50 p.m.•38 views

CVE-2021-2080

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8.4AI score0.01255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•4 views

CVE-2021-2078: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS5.7AI score0.01255EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/01/20 12:00 a.m.•47 views

Unspecified Vulnerability in Oracle Configurator

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01255EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/01/20 12:00 a.m.•43 views

Unspecified Vulnerability in Oracle Configurator (CNVD-2021-07939)

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01255EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/01/20 12:00 a.m.•43 views

Unspecified Vulnerability in Oracle Configurator (CNVD-2021-08152)

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•4 views

PT-2021-1763

Name of the Vulnerable Software and Affected Versions: Oracle Configurator versions 12.1 and 12.2 Description: The issue is related to insufficient input validation in the UI Servlet component of Oracle Configurator, allowing an unauthenticated attacker with network access via HTTP to compromise...

8.5CVSS0.01255EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•2 views

PT-2021-1799

Name of the Vulnerable Software and Affected Versions: Oracle Configurator versions 12.1 through 12.2 Description: The issue exists due to insufficient input validation in the UI Servlet component of Oracle Configurator, allowing a remote attacker to gain unauthorized access to protected...

8.5CVSS0.01255EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•5 views

CVE-2021-2080: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS5.7AI score0.01255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•7 views

CVE-2021-2079: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS5.7AI score0.01255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•1 views

PT-2021-1777

Name of the Vulnerable Software and Affected Versions: Oracle Configurator versions 12.1 and 12.2 Description: The issue is related to insufficient access control in the UI Servlet component of Oracle Configurator, allowing an unauthenticated attacker with network access via HTTP to compromise th...

8.2CVSS5.7AI score0.01255EPSS
SaveExploits0References6
Rows per page
Query Builder