VDB
CVE-2023-20862
CVE-2023-20862
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Spring Security ist ein Framework, das Authentifizierung, Autorisierung und Schutz vor gängigen Angriffen bietet.
EPSS 0.65% · 47.6th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.65%
47.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu | Ubuntu Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Oracle | Oracle Communications 9.1.1.5.0 | |
| Amazon | Amazon Linux 2 | |
| Oracle | Oracle Utilities Applications 4.5.0.1.1 | |
| Oracle | Oracle Communications 22.4.0 | |
| Oracle | Oracle Utilities Applications <= 7.0.0.0 | |
| Oracle | Oracle MySQL <=8.0.34 | |
| Oracle | Oracle Communications Applications 7.3.6.4 | |
| Dell | Dell PowerEdge | |
| Oracle | Oracle Utilities Applications 13.4.1.0.0 | |
| Oracle | Oracle Communications Applications <= 5.5.17 | |
| Oracle | Oracle Communications 23.1.2 | |
| Oracle | Oracle Communications 23.2.0 | |
| Oracle | Oracle Communications Applications 7.3.5 | |
| VMware Tanzu | VMware Tanzu Spring Security <5.8.3 | |
| Oracle | Oracle Financial Services Applications 8.1.2.3 | |
| Oracle | Oracle Utilities Applications <= 4.3.0.6.0 | |
| VMware Tanzu | VMware Tanzu Spring Security <6.0.3 | |
| Oracle | Oracle Communications 23.1.1 |
…and 76 more
Timeline
- Apr 17, 2023 CVE Published
- Apr 20, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 4, 2023 EPSS Score
- Aug 10, 2023 EPSS Score
- Sep 17, 2023 EPSS Score
- Oct 24, 2023 EPSS Score
- Dec 1, 2023 EPSS Score
- Jan 7, 2024 EPSS Score
- Mar 22, 2024 EPSS Score
- Apr 29, 2024 EPSS Score
- Jun 5, 2024 EPSS Score
References
- https://www.dell.com/support/kbdoc/en-us/000209268/dsa-2023-014-dell-poweredge-server-security-update-for-intel-february-2023-security-advisories-2023-1-ipu advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-492105ed08 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0794.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0794 advisory
- https://www.dell.com/support/kbdoc/000223839/dsa-2024-= advisory
- https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixIFLX advisory
- https://ubuntu.com/security/notices/USN-6288-2 advisory
- https://www.ibm.com/support/pages/node/7003901 advisory
- https://www.oracle.com/security-alerts/cpujul2023.html#AppendixCGBU advisory
- https://www.oracle.com/security-alerts/cpujul2023.html#AppendixUTIL advisory
- https://ubuntu.com/security/notices/USN-6288-1 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1812.json advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1794.json advisory
- https://www.oracle.com/security-alerts/cpujul2023.html#AppendixMSQL advisory
- https://www.dell.com/support/kbdoc/de-de/000338043/dsa-2025-258-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2675 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-July/015545.html advisory
- https://www.oracle.com/security-alerts/cpujul2023.html#AppendixCAGBU advisory
- https://access.redhat.com/errata/RHSA-2024:1141 advisory
- https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf advisory
…and 21 more