apache log4j, oracle communications diameter signaling router, oracle communications interactive session recorder +19 lainnya
CVSS 6.6 · Medium EPSS 97,9%
Kerentanan Improper Input Validation pada apache log4j, oracle communications diameter signaling router +20 lainnya. Skor CVSS 3.1 6.6 (Medium) menurut NVD.
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | log4j | Versi 2.0.1 hingga sebelum 2.3.2 |
| apache | log4j | Versi 2.4 hingga sebelum 2.12.4 |
| apache | log4j | Versi 2.13.0 hingga sebelum 2.17.1 |
| apache | log4j | Versi 2.0 |
| apache | log4j | Versi 2.0 beta7 |
| apache | log4j | Versi 2.0 beta8 |
| apache | log4j | Versi 2.0 beta9 |
| apache | log4j | Versi 2.0 rc1 |
| apache | log4j | Versi 2.0 rc2 |
| oracle | communications diameter signaling router | Versi 8.0.0.0 hingga 8.5.1.0 |
| oracle | communications interactive session recorder | Versi 6.3 |
| oracle | communications interactive session recorder | Versi 6.4 |
| oracle | primavera gateway | Versi 17.12.0 hingga 17.12.11 |
| oracle | primavera gateway | Versi 18.8.0 hingga 18.8.13 |
| oracle | primavera gateway | Versi 19.12.0 hingga 19.12.12 |
| oracle | primavera gateway | Versi 20.12.0 hingga 20.12.7 |
| oracle | primavera gateway | Versi 21.12.0 |
| oracle | primavera p6 enterprise project portfolio management | Versi 19.12.0 hingga 19.12.18.0 |
| oracle | primavera p6 enterprise project portfolio management | Versi 20.12.0.0 hingga 20.12.12.0 |
| oracle | primavera p6 enterprise project portfolio management | Versi 21.12.0.0 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | primavera unifier | Versi 20.12 |
| oracle | primavera unifier | Versi 21.12 |
| oracle | retail assortment planning | Versi 16.0.3 |
| oracle | retail fiscal management | Versi 14.2 |
| oracle | siebel ui framework | Versi 21.12 |
| oracle | weblogic server | Versi 12.2.1.3.0 |
| oracle | weblogic server | Versi 12.2.1.4.0 |
| oracle | weblogic server | Versi 14.1.1.0.0 |
| cisco | cloudcenter | Versi 4.10.0.16 |
| fedoraproject | fedora | Versi 34 |
| fedoraproject | fedora | Versi 35 |
| debian | debian linux | Versi 9.0 |
| oracle | communications brm - elastic charging engine | Semua versi sebelum 12.0.0.4.6 |
| oracle | communications brm - elastic charging engine | Versi 12.0.0.5.0 |
| oracle | communications diameter signaling router | Versi 8.3.0.0 hingga 8.5.1.0 |
| oracle | communications offline mediation controller | Semua versi sebelum 12.0.0.4.4 |
| oracle | communications offline mediation controller | Versi 12.0.0.5.0 |
| oracle | flexcube private banking | Versi 12.1.0 |
| oracle | health sciences data management workbench | Versi 2.5.2.1 |
| oracle | health sciences data management workbench | Versi 3.0.0.0 |
| oracle | health sciences data management workbench | Versi 3.1.0.3 |
| oracle | policy automation | Versi 12.2.0 hingga 12.2.24 |
| oracle | policy automation for mobile devices | Versi 12.2.0 hingga 12.2.24 |
| oracle | primavera p6 enterprise project portfolio management | Versi 19.12.0.0 hingga 19.12.18.0 |
| oracle | product lifecycle analytics | Versi 3.6.1 |
| oracle | retail order broker | Versi 18.0 |
| oracle | retail order broker | Versi 19.1 |
| oracle | retail xstore point of service | Versi 17.0.4 |
| oracle | retail xstore point of service | Versi 18.0.3 |
| oracle | retail xstore point of service | Versi 19.0.2 |
| oracle | retail xstore point of service | Versi 20.0.1 |
| oracle | retail xstore point of service | Versi 21.0.1 |
| oracle | siebel ui framework | Semua versi hingga 21.12 |