VDB
CVE-2022-46337
CVE-2022-46337
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Es besteht eine Schwachstelle in IBM Business Automation Workflow. Dieser Fehler besteht in der Apache Derby-Komponente aufgrund eines LDAP-Injektionsproblems, das es ermöglicht, sensible Daten anzuzeigen und zu beschädigen sowie sensible Datenbankfunktionen und -prozeduren auszuführen. Durch das Senden einer speziell gestalteten Anfrage kann ein entfernter, anonymer Angreifer diese Schwachstelle ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.
EPSS 0.05% · 14.8th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.05%
14.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Retail Applications 15.0.3.1 | |
| Oracle | Oracle Financial Services Applications 3.2.0.0.0 | |
| Oracle | Oracle Financial Services Applications 14.7.0.3.0 | |
| Oracle | Oracle Financial Services Applications 19.2.0.0.0 | |
| Oracle | Oracle Systems 4 | |
| IBM | IBM TXSeries Multiplatforms 9.1 | |
| Oracle | Oracle Financial Services Applications 2.7.0.0.0 | |
| Oracle | Oracle Financial Services Applications 2.9.0.1.0 | |
| Oracle | Oracle Commerce 11.4.0 | |
| Oracle | Oracle Retail Applications 14.1.3.1 | |
| Oracle | Oracle Insurance Applications 12.7 | |
| Oracle | Oracle Enterprise Manager 13.3.0.1 | |
| Oracle | Oracle Retail Applications 19.0.5 | |
| Oracle | Oracle Financial Services Applications 3.1.0.0.0 | |
| Oracle | Oracle Retail Applications 19.0.0.9 | |
| Oracle | Oracle Fusion Middleware 12.2.1.3.0 | |
| IBM | IBM App Connect Enterprise 11.0.0.1 - 11.0.0.24 | |
| Oracle | Oracle Retail Applications 20.0.4 | |
| Oracle | Oracle Retail Applications 22.0.1 | |
| Oracle | Oracle Retail Applications 16.0.3 |
…and 33 more
Timeline
- Nov 20, 2023 CVE Published
- Nov 21, 2023 EPSS Score
- Dec 21, 2023 EPSS Score
- Jan 20, 2024 EPSS Score
- Feb 8, 2024 PoC Published
- Feb 19, 2024 EPSS Score
- Mar 20, 2024 EPSS Score
- May 19, 2024 EPSS Score
- Jun 18, 2024 EPSS Score
- Jul 18, 2024 EPSS Score
- Aug 17, 2024 EPSS Score
- Sep 16, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0537.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0537 advisory
- https://www.ibm.com/support/pages/security-bulletin-denial-service-vulnerability-affect-ibm-business-automation-workflow-event-emitters-cve-2023-51074 advisory
- https://www.ibm.com/support/pages/node/7129317 advisory
- https://www.ibm.com/support/pages/node/7129249 advisory
- https://www.ibm.com/support/pages/node/7142190 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0873.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0873 advisory
- https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0874.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0874 advisory
- https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixEM advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0892.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0892 advisory
- https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0896.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0896 advisory
- https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixINSU advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0899.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0899 advisory
…and 11 more