OSA-34878767 | Vulnetix

OSA-34878767 PUBLISHED CVSS 7.800000190734863 HIGH

Record from oracle · Published April 25, 2023

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: SSL Module (libxml2)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Risk scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Timeline

Apr 25, 2023 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln OSA-34878767
vulnetix vdb fixes OSA-34878767

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/OSA-34878767/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle CPU cpuapr2023 — CVE-2022-40304 advisory

Look up in the Resolve Platform →