Vulnerabilities in Oracle

224 results
Vexday analysis

Com 224 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, a taxa de exploração da Oracle neste conjunto está abaixo da média geral do catálogo. Apesar da ausência de vulnerabilidades críticas formalmente classificadas e de novas ocorrências nos últimos 90 dias, a presença de CVE-2017-3248 com EPSS de 0,973 indica probabilidade muito elevada de exploração ativa segundo os modelos preditivos, exigindo atenção redobrada de equipes que ainda não aplicaram as correções correspondentes. Três vulnerabilidades possuem PoC pública disponível, o que amplia a superfície de risco para organizações que mantêm versões desatualizadas. O conjunto de dados sugere um perfil de risco residual concentrado em vulnerabilidades mais antigas, onde a janela de remediação já foi amplamente ultrapassada.

CVE-2017-3322—Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.2EPSS 1.6%CVE-2017-3323—Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.EPSS 1.6%CVE-2017-3333—Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affecEPSS 1.6%CVE-2017-3421—Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions tEPSS 1.6%CVE-2017-3359—Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions thEPSS 1.6%CVE-2017-3361—Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are EPSS 1.6%CVE-2017-3362—Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions thaEPSS 1.6%CVE-2017-3415—Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions thaEPSS 1.6%CVE-2017-3418—Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported versEPSS 1.6%CVE-2017-3373—Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versiEPSS 1.6%CVE-2017-3369—Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affectEPSS 1.6%CVE-2017-3279—Vulnerability in the Oracle Leads Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that arEPSS 1.6%CVE-2016-8308—Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / InstrumentEPSS 1.5%CVE-2017-3443—Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions thatEPSS 1.5%CVE-2017-3292—Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). SupportedEPSS 1.5%CVE-2017-3372—Vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions thaEPSS 1.5%CVE-2016-8311—Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported vEPSS 1.5%CVE-2017-3236—Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported vEPSS 1.5%CVE-2016-8301—Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported vEPSS 1.5%CVE-2016-8315—Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure CoEPSS 1.5%