Lucene search
K

26 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-0576

Malware in sbrugna...

5CVSS7.4AI score0.00321EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 9:2 p.m.3 views

CVE-2021-2079

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS6.5AI score0.01691EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/01/20 12:0 a.m.34 views

Oracle E-Business Suite (Jan 2022 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Intelligence, RFx Creation. Supported versions that ar...

8.1CVSS6.5AI score0.51657EPSS
Exploits1References11
Prion
Prion
added 2022/01/19 12:15 p.m.16 views

Design/Logic Flaw

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: UI Servlet. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful...

5.5CVSS8AI score0.01261EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/19 11:22 a.m.18 views

CVE-2022-21255

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: UI Servlet. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful...

8.1CVSS7.8AI score0.01261EPSS
Exploits0References1
CVE
CVE
added 2022/01/19 11:22 a.m.91 views

CVE-2022-21255

CVE-2022-21255 affects Oracle E-Business Suite Configurator (UI Servlet). Affected versions are 12.2.3–12.2.11. The vulnerability allows a network-accessible, low-privilege attacker to exploit via HTTP to compromise data, enabling unauthorized creation/deletion/modification of Oracle Configurator...

8.1CVSS8.1AI score0.01261EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2021/01/20 3:15 p.m.8 views

CVE-2021-2079

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8AI score0.01691EPSS
Exploits0References1
Prion
Prion
added 2021/01/20 3:15 p.m.11 views

Buffer overflow

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

5.8CVSS8.3AI score0.01691EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/01/20 3:15 p.m.12 views

Buffer overflow

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

5.8CVSS8.3AI score0.01691EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/01/20 2:50 p.m.43 views

CVE-2021-2079

CVE-2021-2079 affects Oracle Configurator (UI Servlet) in Oracle Supply Chain; impacted versions are 12.1 and 12.2. The issue enables network-accessible, unauthenticated access via HTTP, with user interaction required to exploit and potential for unauthorized data access and data modification. Ro...

8.2CVSS8.3AI score0.01691EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/20 2:50 p.m.11 views

CVE-2021-2080

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8.4AI score0.01691EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/01/20 2:50 p.m.14 views

CVE-2021-2078

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS8.4AI score0.01691EPSS
Exploits0References1
CVE
CVE
added 2021/01/20 2:50 p.m.40 views

CVE-2021-2080

CVE-2021-2080 affects Oracle Configurator (UI Servlet) in Oracle Supply Chain, specifically versions 12.1 and 12.2. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker; however, successful attacks require human interaction. Impact includes unauthorized access to c...

8.2CVSS8.3AI score0.01691EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/01/20 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Configurator (CNVD-2021-08152)

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01691EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/20 12:0 a.m.5 views

Unspecified Vulnerability in Oracle Configurator (CNVD-2021-07939)

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01691EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/20 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Configurator

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS6.2AI score0.01691EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.2 views

Oracle Configurator 授权问题漏洞

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

8.2CVSS5.8AI score0.01691EPSS
Exploits0References2
OSV
OSV
added 2020/07/15 6:15 p.m.3 views

CVE-2020-14669

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7.3AI score0.01586EPSS
Exploits0References1
Prion
Prion
added 2020/07/15 6:15 p.m.5 views

Buffer overflow

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

5.8CVSS8.3AI score0.01586EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/07/15 5:34 p.m.5 views

CVE-2020-14669

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS7.3AI score0.01586EPSS
Exploits0References1
Rows per page
Query Builder