CVE-2023-21036
In Oracle Insurance Applications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist "HIGH" für "Confidentiality", "Integrity" und "Availability" über alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert "MITTEL-HOCH" für die Schadenshöhe.
EPSS 0.27% · 50.3th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Insurance Applications 11.2.12 | |
| Oracle | Oracle Insurance Applications <=11.3.2 | |
| Google Android AOSP 13 | ||
| Oracle | Oracle Insurance Applications 12.6.4 | |
| Oracle | Oracle Insurance Applications 12.7.1 |
Exploit Intelligence
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc-repo)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc)
- A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python. (github-poc)
…and 51 more exploits
Timeline
- Mar 24, 2023 CVE Published
- Mar 25, 2023 EPSS Score
- May 2, 2023 EPSS Score
- Jun 10, 2023 EPSS Score
- Aug 25, 2023 EPSS Score
- Oct 3, 2023 EPSS Score
- Nov 10, 2023 EPSS Score
- Dec 18, 2023 EPSS Score
- Jan 26, 2024 EPSS Score
- Apr 11, 2024 EPSS Score
- May 20, 2024 EPSS Score
- Jun 27, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1659.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1659 advisory
- https://www.oracle.com/security-alerts/cpujul2024.html#AppendixINSU advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0633.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0633 advisory
- https://source.android.com/docs/security/bulletin/pixel/2023-03-01 advisory