imPC@ndo EN

Tracker / CVE-2022-23307

CVE-2022-23307

Alta 8.8

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

Prodotti e versioni affette

apache chainsaw · … → 2.1.0
apache log4j · 1.2 → 2.0
oracle advanced_supply_chain_planning
oracle business_intelligence
oracle business_process_management_suite
oracle communications_eagle_ftp_table_base_retrieval
oracle communications_instant_messaging_server
oracle communications_messaging_server
oracle communications_network_integrity
oracle communications_offline_mediation_controller
oracle communications_offline_mediation_controller · … → 12.0.0.4.4
oracle communications_unified_inventory_management
oracle e-business_suite_cloud_manager_and_cloud_backup_module
oracle e-business_suite_cloud_manager_and_cloud_backup_module · … → 2.2.1.1.1
oracle enterprise_manager_base_platform
oracle financial_services_revenue_management_and_billing_analytics
oracle healthcare_foundation
oracle hyperion_data_relationship_management · … → 11.2.8.0
oracle hyperion_infrastructure_technology · … → 11.2.8.0
oracle identity_management_suite
oracle identity_manager_connector
oracle jdeveloper
oracle middleware_common_libraries_and_tools
oracle mysql_enterprise_monitor · … → 8.0.29
oracle retail_extract_transform_and_load
oracle tuxedo
oracle weblogic_server
qos reload4j · … → 1.2.18.1

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti