VDB

BDU%3A2019-04406

BDU%3A2019-04406 PUBLISHED CVSS 7.900000095367432 HIGH

Уязвимость платформы веб-сервисов Apache Axis, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю осуществить SSRF-атаку

Risk Scores

CVSS 2.0
7.900000095367432

Affected Products

VendorProductVersions
Oracle Corp., Apache Software Foundation, АО «Концерн ВНИИНС»Primavera Unifier, Tuxedo, PeopleSoft Enterprise PeopleTools, WebCenter Portal, Oracle Secure Global Desktop, Oracle Retail Order Broker, Instantis EnterpriseTrack, Agile Engineering Data Management, Enterprise Manager Base Platform, Oracle Hospitality Guest Access, Application Testing Suite, Retail Xstore Point of Service, Axis, Oracle Policy Automation Connector for Siebel, PeopleSoft Enterprise HCM Human Resources, Primavera Gateway, Oracle Communications Design Studio, Financial Services Analytical Applications Infrastructure, Oracle Endeca Information Discovery Studio, Oracle Agile PLM Framework, Oracle Communications Element Manager, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Oracle FLEXCUBE Private Banking, Oracle Big Data Discovery, Oracle Communications ASAP Cartridges, Oracle Knowledge, Financial Services Funds Transfer Pricing, Rapid Planning, Oracle Communications Order and Service Management, Oracle Communications Network Integrity, Enterprise Manager for Fusion Middleware, Financial Services Compliance Regulatory Reporting, Oracle Real-Time Decision Server, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177)

Timeline

  • Dec 3, 2019 CVE Published
  • Nov 21, 2023 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›