OSA-35280042 | Vulnetix

OSA-35280042 PUBLISHED CVSS 3.299999952316284 LOW

Record from oracle · Published January 25, 2024

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench (Apache Tika)). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search executes to compromise Oracle Commerce Guided Search. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).

Risk scores

CVSS 3.1

3.299999952316284

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Timeline

Jan 25, 2024 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln OSA-35280042
vulnetix vdb fixes OSA-35280042

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/OSA-35280042/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle CPU cpujan2024 — CVE-2022-33879 advisory

Look up in the Resolve Platform →