VDB
CVE-2024-20956
CVE-2024-20956
PUBLISHED
Die Oracle Supply Chain ist eine Sammlung von Applikationen für verschiedene Zwecke.
EPSS 0.14% · 33.3th percentile
Risk Scores
EPSS Score
0.14%
33.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Supply Chain <6.2.4.2 | |
| Oracle | Oracle Supply Chain 12.1 | |
| Oracle | Oracle Supply Chain 9.3.6 | |
| Oracle | Oracle Supply Chain 11.5 | |
| Oracle | Oracle Supply Chain 12.2 | |
| Ubuntu | Ubuntu Linux |
Exploit Intelligence
- CIRCL seen: CVE-2024-20956 (circl-sighting)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog (certbund)
- Oracle Advisory (circl)
Timeline
- Jan 16, 2024 CVE Published
- Feb 10, 2024 PoC Published
- Feb 17, 2024 EPSS Score
- Feb 17, 2024 CVE Updated
- Mar 15, 2024 EPSS Score
- Apr 11, 2024 EPSS Score
- May 8, 2024 EPSS Score
- Jun 4, 2024 EPSS Score
- Jul 1, 2024 EPSS Score
- Jul 28, 2024 EPSS Score
- Aug 24, 2024 EPSS Score
- Sep 20, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0115.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0115 advisory
- https://www.oracle.com/security-alerts/cpujan2024.html#AppendixSCP advisory
- https://ubuntu.com/security/notices/USN-6683-1 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit