Vulnerabilidades en Oracle
224 resultadosAnálisis Vexday
Com 224 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, a taxa de exploração da Oracle neste conjunto está abaixo da média geral do catálogo. Apesar da ausência de vulnerabilidades críticas formalmente classificadas e de novas ocorrências nos últimos 90 dias, a presença de CVE-2017-3248 com EPSS de 0,973 indica probabilidade muito elevada de exploração ativa segundo os modelos preditivos, exigindo atenção redobrada de equipes que ainda não aplicaram as correções correspondentes. Três vulnerabilidades possuem PoC pública disponível, o que amplia a superfície de risco para organizações que mantêm versões desatualizadas. O conjunto de dados sugere um perfil de risco residual concentrado em vulnerabilidades mais antigas, onde a janela de remediação já foi amplamente ultrapassada.
CVE-2017-3327—Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions thEPSS 1.8%CVE-2017-3284—Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versiEPSS 1.8%CVE-2017-3285—Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite (subcomponent: User Interface). Supported versiEPSS 1.8%CVE-2017-3326—Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that aEPSS 1.8%CVE-2017-3440—Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versEPSS 1.8%CVE-2017-3325—Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). The supported version that is affected is 16.1.EPSS 1.8%CVE-2017-3278—Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation). The supported EPSS 1.8%CVE-2017-3303—Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite (subcomponent: Oracle Transport Agent). Supported versions thatEPSS 1.8%CVE-2017-3255—Vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: ADF Faces). Supported versions that are affectedEPSS 1.8%CVE-2016-5528—Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Security). Supported versions that are affEPSS 1.8%CVE-2017-3251—Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.EPSS 1.7%CVE-2016-8310—Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported vEPSS 1.7%CVE-2016-8328—Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is JavEPSS 1.7%CVE-2016-8312—Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / InstrumentEPSS 1.7%CVE-2016-8324—Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versioEPSS 1.7%CVE-2016-8307—Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported vEPSS 1.6%CVE-2017-3245—Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). SupportedEPSS 1.6%CVE-2017-3310—Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploiEPSS 1.6%CVE-2017-3300—Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Multichannel Framework). SuppoEPSS 1.6%CVE-2017-3280—Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that EPSS 1.6%