DeutschShown in its original language — a full translation is planned for a future version.
Oracle Supply Chain: Mehrere Schwachstellen
view advisory published 2024-01-16
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Supply Chain ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20956US | — | — | ||
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). Supported versions that are affected are Prior… | ||||
| CVE-2024-20953US | —OT critical | KEV | ||
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows… | ||||
| CVE-2024-20942US | — | — | ||
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: LOV). Supported versions that are affected are 11.5, 12.1 and 12.… | ||||
| CVE-2023-44487US | high7.5OT critical | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
| CVE-2023-2976US | high7.1 | — | ||
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows o… | ||||
| CVE-2023-34624US | high7.5 | — | ||
An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-6683-1 vom 2024-03-07external
- WID-SEC-W-2024-0115 - CSAF Versionself
- WID-SEC-2024-0115 - Portal Versionself
- CISA Known Exploited Vulnerabilities Catalog vom 2025-02-24external
- Oracle Critical Patch Update Advisory - January 2024 - Appendix Oracle Supply Chain vom 2024-01-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan