VDB
CVE-2024-20953
CVE-2024-20953
PUBLISHED
KEV
Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.
EPSS 3.93% · 90.3th percentile
Risk Scores
EPSS Score
3.93%
90.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Supply Chain <6.2.4.2 | |
| Oracle | Oracle Supply Chain 12.1 | |
| Oracle | Oracle Supply Chain 9.3.6 | |
| Oracle | Oracle Supply Chain 12.2 | |
| Ubuntu | Ubuntu Linux | |
| Oracle | Oracle Supply Chain 11.5 |
Timeline
- Jan 16, 2024 CVE Published
- Feb 10, 2024 PoC Published
- Feb 17, 2024 EPSS Score
- Apr 12, 2024 EPSS Score
- May 9, 2024 EPSS Score
- Jul 2, 2024 EPSS Score
- Aug 26, 2024 EPSS Score
- Sep 22, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Nov 16, 2024 EPSS Score
- Jan 10, 2025 EPSS Score
- Feb 7, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0115.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0115 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixSCP advisory
- https://ubuntu.com/security/notices/USN-6683-1 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit