VDB
CVE-2023-20861
CVE-2023-20861
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Oracle Enterprise Manager (OEM) ist ein Set von System Management Werkzeugen von Oracle für Oracle Umgebungen. Es beinhaltet Werkzeuge zum Monitoring von Oracle Umgebung und zur Automatisierung von Datenbank- und Applikations Administration.
EPSS 0.97% · 61.6th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.97%
61.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Enterprise Manager 13.3.0.1 | |
| Oracle | Oracle Communications 22.4.3 | |
| Dell | Dell Secure Connect Gateway <5.34.00.16 | |
| Oracle | Oracle Financial Services Applications 14.6.0.4.0 | |
| Oracle | Oracle Communications Applications 7.3.6.4 | |
| Oracle | Oracle Enterprise Manager 13.5.0.0 | |
| Oracle | Oracle Communications 23.2.0 | |
| Oracle | Oracle Communications Applications 10.0.1.7.0 | |
| Oracle | Oracle Communications 23.1.2 | |
| Oracle | Oracle Financial Services Applications 8.0.8 | |
| Broadcom | Broadcom Brocade SANnav <2.3.0a | |
| Oracle | Oracle Communications Applications <= 8.0.0.7.0 | |
| Open Source | Open Source Vaadin <24.1.0.alpha1 | |
| VMware Tanzu | VMware Tanzu Spring Framework <5.2.23 | |
| Oracle | Oracle Communications Applications <= 8.0.0.8.0 | |
| Oracle | Oracle Communications 6.2.0 | |
| Red Hat | Red Hat Integration Camel Extensions for Quarkus 1 | |
| Oracle | Oracle Financial Services Applications 14.6 | |
| Oracle | Oracle Financial Services Applications 14.7.0.0.0 | |
| Oracle | Oracle Communications 5.0 |
…and 75 more
Timeline
- Mar 20, 2023 CVE Published
- Mar 24, 2023 EPSS Score
- May 2, 2023 EPSS Score
- Jun 10, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 6, 2023 EPSS Score
- Nov 14, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
- Mar 11, 2024 EPSS Score
- Apr 19, 2024 EPSS Score
- May 29, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0697.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0697 advisory
- https://spring.io/blog/2023/03/20/spring-framework-5-2-23-fixes-cve-2023-20861 advisory
- https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861 advisory
- https://github.com/vaadin/platform/releases/tag/24.1.0.alpha1 advisory
- https://security.netapp.com/advisory/ntap-20230420-0007/ advisory
- https://security.netapp.com/advisory/ntap-20230505-0006/ advisory
- https://www.ibm.com/support/pages/node/6997063 advisory
- https://www.ibm.com/support/pages/node/7001309 advisory
- https://access.redhat.com/errata/RHSA-2023:3771 advisory
- https://www.ibm.com/support/pages/node/7010099 advisory
- https://www.pdfreactor.com/pdfreactor-11-hotfix-release-11-6-6-now-available/ advisory
- https://www.ibm.com/support/pages/node/7015075 advisory
- https://access.redhat.com/errata/RHSA-2023:4983 advisory
- https://support.broadcom.com/external/content/SecurityAdvisories/0/23261 advisory
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24999 advisory
- https://www.dell.com/support/kbdoc/de-de/000338043/dsa-2025-258-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1142.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1142 advisory
- https://access.redhat.com/errata/RHSA-2023:2100 advisory
…and 56 more