VDB
BDU%3A2023-01045
BDU%3A2023-01045
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием ограничений на загрузку файлов, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Oracle Corp., Apache Software Foundation | Red Hat Enterprise Linux, Ubuntu, WebCenter Sites, Oracle Transportation Management, Oracle Endeca Information Discovery Integrator, Oracle Retail Order Broker, Instantis EnterpriseTrack, FMW Platform, Communications Application Session Controller, Oracle Hospitality Guest Access, Oracle Agile PLM, MICROS Retail XBRi Loss Prevention, Tomcat, Enterprise Manager for MySQL Database, Financial Services Analytical Applications Infrastructure, Management Pack for Oracle GoldenGate, Oracle Tuxedo System and Applications Monitor, Oracle Health Sciences Empirica Inspections, MySQL Enterprise Monitor, Oracle Retail Convenience and Fuel POS Software |
Timeline
- Mar 6, 2023 CVE Published
- Feb 6, 2025 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
References
- https://www.ibm.com/blogs/psirt/security-bulletin-cloud-pak-for-security-contains-packages-that-have-multiple-vulnerabilities/ url
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html url
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html url
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html url
- http://www.securityfocus.com/bid/100954 url
- http://www.securitytracker.com/id/1039552 url
- https://access.redhat.com/errata/RHSA-2017:3080 url
- https://access.redhat.com/errata/RHSA-2017:3081 url
- https://access.redhat.com/errata/RHSA-2017:3113 url
- https://access.redhat.com/errata/RHSA-2017:3114 url
- https://access.redhat.com/errata/RHSA-2018:0268 url
- https://access.redhat.com/errata/RHSA-2018:0269 url
- https://access.redhat.com/errata/RHSA-2018:0270 url
- https://access.redhat.com/errata/RHSA-2018:0271 url
- https://access.redhat.com/errata/RHSA-2018:0275 url
- https://access.redhat.com/errata/RHSA-2018:0465 url
- https://access.redhat.com/errata/RHSA-2018:0466 url
- https://access.redhat.com/errata/RHSA-2018:2939 url
- https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E url
…and 32 more