VDB
CVE-2023-44483
CVE-2023-44483
PUBLISHED
Es existiert eine Schwachstelle in Red Hat JBoss A-MQ und Red Hat Enterprise Linux. Diese besteht in der Komponente "Apache Santuario - XML Security" und ist auf einen Fehler in der "JSR 105" API zurückzuführen, welcher einen privaten Schlüssel möglicherweise in die Logdateien schreibt. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen.
EPSS 0.17% · 38.6th percentile
Risk Scores
EPSS Score
0.17%
38.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Financial Services Applications 8.1.2.6 | |
| Oracle | Oracle Communications 23.1.4 | |
| Oracle | Oracle Communications 23.4.0 | |
| Oracle | Oracle Financial Services Applications 3.0.0.0.0 | |
| Oracle | Oracle Financial Services Applications 2.7.0.0.0 | |
| Oracle | Oracle Financial Services Applications 8.1.1.1 | |
| Oracle | Oracle Financial Services Applications 8.1.2.7 | |
| Oracle | Oracle Financial Services Applications 4.0.0.0 | |
| Oracle | Oracle Financial Services Applications 5.1.0 | |
| Oracle | Oracle Financial Services Applications 8.0.8 | |
| Oracle | Oracle Communications Applications <= 5.5.19 | |
| Oracle | Oracle Fusion Middleware 14.1.1.0.0 | |
| Oracle | Oracle Financial Services Applications 8.0.8.6 | |
| Oracle | Oracle Financial Services Applications 3.1.0 | |
| Oracle | Oracle Financial Services Applications 14.4.0.0.0-14.7.0.0.0 | |
| Oracle | Oracle Financial Services Applications 2.9.0.0.0 | |
| Oracle | Oracle Financial Services Applications 6.1.0.0.0 | |
| Oracle | Oracle Financial Services Applications 14.4.0.0.0 | |
| Oracle | Oracle Communications 23.2.0.0.2 | |
| Oracle | Oracle Communications Applications 10.0.1.7.0 |
…and 116 more
Timeline
- Oct 20, 2023 CVE Published
- Oct 21, 2023 EPSS Score
- Nov 21, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
- Feb 22, 2024 EPSS Score
- Mar 25, 2024 EPSS Score
- Apr 25, 2024 EPSS Score
- May 26, 2024 EPSS Score
- Jun 26, 2024 EPSS Score
- Aug 27, 2024 EPSS Score
- Sep 27, 2024 EPSS Score
- Oct 28, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2943.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2943 advisory
- https://www.ibm.com/support/pages/node/7076305 advisory
- https://www.ibm.com/support/pages/node/7077061 advisory
- https://www.ibm.com/support/pages/node/7096373 advisory
- https://www.ibm.com/support/pages/node/7107861 advisory
- https://www.ibm.com/support/pages/node/7112522 advisory
- https://www.ibm.com/support/pages/node/7246099 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0106.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0106 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixCGBU advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0107.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0107 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixCAGBU advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0118.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0118 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixPS advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0123.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0123 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixFMW advisory
…and 47 more