漏洞标题
N/A
漏洞描述信息
Oracle Application Express客户插件产品(组件：用户账户)中的漏洞。受影响的支持版本是Application Express客户插件：18.2-22.2。易用的漏洞允许通过HTTP网络访问的较低权限攻击者访问Application Express客户插件。成功的攻击需要攻击者之外的人人与人之间的互动，尽管漏洞在Application Express客户插件中，但攻击可能会对其他产品产生重大影响(范围更改)。利用此漏洞的成功攻击可能导致Application Express客户插件被接管。CVSS 3.1基础得分为9.0(影响保密性、完整性和可用性)。CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H
漏洞类别
跨界内存写
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account). Supported versions that are affected are Application Express Customers Plugin: 18.2-22.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Application Express Customers Plugin. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Application Express Customers Plugin, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Application Express Customers Plugin. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Oracle Application Express 安全漏洞
漏洞描述信息
Oracle Application Express是美国甲骨文（Oracle）公司的一个低代码开发平台。 Oracle Application Express 的 Application Express Customers Plugin product 存在安全漏洞，该漏洞源于 User Account 模块允许通过 HTTP 进行网络访问的低权限攻击者破坏 Application Express 客户插件。成功的攻击需要攻击者以外的人进行人工交互，虽然该漏洞存在于 Application Expres
CVSS信息
N/A
漏洞类别
其他