漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Commerce Platform组件信息泄露漏洞
Vulnerability Description
Oracle Commerce是美国甲骨文(Oracle)公司的一套电子商务解决方案。Oracle Commerce Platform是其中的一个提供多功能的电子商务平台组件。 Oracle Commerce中的Oracle Commerce Platform组件的Dynamo Application Framework子组件存在安全漏洞。攻击者可利用该漏洞未授权读取数据,影响数据的保密性。以下版本受到影响:Oracle Commerce Platform 10.0.3.5版本,10.2.0.5版本,11
CVSS Information
N/A
Vulnerability Type
N/A