OSA-33287901 | Vulnetix

OSA-33287901 PUBLISHED CVSS 4.800000190734863 MEDIUM

Record from oracle · Published January 25, 2024

Vulnerability in the Oracle Utilties Application Framework product of Oracle Utilities Applications (component: General (Apache Commons IO)). Supported versions that are affected are 4.3.0.3.0-4.3.0.6.0, 4.4.0.0.0 and 4.4.0.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Utilties Application Framework. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Utilties Application Framework accessible data as well as unauthorized read access to a subset of Oracle Utilties Application Framework accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

Risk scores

CVSS 3.1

4.800000190734863

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Timeline

Jan 25, 2024 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln OSA-33287901
vulnetix vdb fixes OSA-33287901

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/OSA-33287901/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle CPU cpujan2024 — CVE-2021-29425 advisory

Look up in the Resolve Platform →