vmware spring framework, oracle commerce guided search, oracle communications brm - elastic charging engine +29 lainnya
CVSS 7.8 · High EPSS 0,40%
Kerentanan Improper Privilege Management pada vmware spring framework, oracle commerce guided search +30 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | spring framework | Versi 5.2.0 hingga sebelum 5.2.15 |
| vmware | spring framework | Versi 5.3.0 hingga sebelum 5.3.7 |
| oracle | commerce guided search | Versi 11.3.2 |
| oracle | communications brm - elastic charging engine | Versi 12.0.0.3 |
| oracle | communications cloud native core binding support function | Versi 1.9.0 |
| oracle | communications cloud native core policy | Versi 1.14.0 |
| oracle | communications cloud native core security edge protection proxy | Versi 1.6.0 |
| oracle | communications cloud native core service communication proxy | Versi 1.14.0 |
| oracle | communications cloud native core unified data repository | Versi 1.14.0 |
| oracle | communications diameter intelligence hub | Versi 8.0.0 hingga 8.1.0 |
| oracle | communications diameter intelligence hub | Versi 8.2.0 hingga 8.2.3 |
| oracle | communications element manager | Versi 8.2.0 hingga 8.2.4.0 |
| oracle | communications interactive session recorder | Versi 6.4 |
| oracle | communications network integrity | Versi 7.3.6 |
| oracle | communications session report manager | Versi 8.0.0 hingga 8.2.4.0 |
| oracle | communications session route manager | Versi 8.0.0 hingga 8.2.4.0 |
| oracle | communications unified inventory management | Versi 7.4.1 |
| oracle | communications unified inventory management | Versi 7.4.2 |
| oracle | communications unified inventory management | Versi 7.5.0 |
| oracle | documaker | Versi 12.6.0 hingga 12.6.4 |
| oracle | enterprise data quality | Versi 12.2.1.3.0 |
| oracle | enterprise data quality | Versi 12.2.1.4.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.8 hingga 8.1.1 |
| oracle | healthcare data repository | Versi 8.1.0 |
| oracle | insurance policy administration | Versi 11.0 hingga 11.3.1 |
| oracle | insurance rules palette | Versi 11.0.2 |
| oracle | insurance rules palette | Versi 11.1.0 |
| oracle | insurance rules palette | Versi 11.2.7 |
| oracle | insurance rules palette | Versi 11.3.0 |
| oracle | insurance rules palette | Versi 11.3.1 |
| oracle | mysql enterprise monitor | Semua versi hingga 8.0.25 |
| oracle | retail assortment planning | Versi 16.0 |
| oracle | retail customer management and segmentation foundation | Versi 16.0 hingga 19.0 |
| oracle | retail financial integration | Versi 14.1.3.2 |
| oracle | retail financial integration | Versi 15.0.3.1 |
| oracle | retail financial integration | Versi 16.0.3 |
| oracle | retail integration bus | Versi 14.1.3.2 |
| oracle | retail integration bus | Versi 15.0.3.1 |
| oracle | retail integration bus | Versi 16.0.3 |
| oracle | retail merchandising system | Versi 19.0.1 |
| oracle | retail order broker | Versi 16.0 |
| oracle | retail predictive application server | Versi 14.1.3 |
| oracle | retail predictive application server | Versi 15.0.3 |
| oracle | retail predictive application server | Versi 16.0.3 |
| oracle | utilities testing accelerator | Versi 6.0.0.1.1 |
| oracle | utilities testing accelerator | Versi 6.0.0.2.2 |
| oracle | utilities testing accelerator | Versi 6.0.0.3.1 |
| netapp | hci | Semua versi |
| netapp | management services for element software | Semua versi |