access:pre-auth 类型相关 24455 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-2114 | Oracle E-Business Suite 授权问题漏洞 — Common Applications Calendar | 8.2 | High | 2021-01-20 |
| CVE-2021-2118 | Oracle E-Business Suite和Oracle Marketing 授权问题漏洞 — Marketing | 8.2 | High | 2021-01-20 |
| CVE-2021-2102 | Oracle Dialog Box 安全漏洞 — Complex Maintenance, Repair, and Overhaul | 8.2 | High | 2021-01-20 |
| CVE-2021-2103 | Oracle Dialog Box 安全漏洞 — Complex Maintenance, Repair, and Overhaul | 8.2 | High | 2021-01-20 |
| CVE-2021-2104 | Oracle Supply Chain 安全漏洞 — Complex Maintenance, Repair, and Overhaul | 8.2 | High | 2021-01-20 |
| CVE-2021-2105 | Oracle E-Business Suite 产品授权问题漏洞 — Customer Interaction History | 8.2 | High | 2021-01-20 |
| CVE-2021-2106 | Oracle E-Business Suite 安全漏洞 — Customer Interaction History | 8.2 | High | 2021-01-20 |
| CVE-2021-2107 | Oracle E-Business Suite 授权问题漏洞 — Customer Interaction History | 8.2 | High | 2021-01-20 |
| CVE-2021-2108 | Oracle Fusion Middleware 组件授权问题漏洞 — WebLogic Server | 9.8 | Critical | 2021-01-20 |
| CVE-2021-2092 | Oracle E-Business Suite 安全漏洞 — CRM Technical Foundation | 8.2 | High | 2021-01-20 |
| CVE-2021-2093 | Oracle E-Business Suite 安全漏洞 — Common Applications | 8.2 | High | 2021-01-20 |
| CVE-2021-2094 | Oracle E-Business Suite 授权问题漏洞 — One-to-One Fulfillment | 8.2 | High | 2021-01-20 |
| CVE-2021-2096 | Oracle E-Business Suite 组件安全漏洞 — iStore | 8.2 | High | 2021-01-20 |
| CVE-2021-2097 | Oracle E-Business Suite 组件安全漏洞 — iSupport | 8.2 | High | 2021-01-20 |
| CVE-2021-2098 | Oracle E-Business Suite 授权问题漏洞 — Email Center | 8.2 | High | 2021-01-20 |
| CVE-2021-2099 | Oracle E-Business Suite 组件安全漏洞 — CRM Technical Foundation | 8.2 | High | 2021-01-20 |
| CVE-2021-2100 | Oracle E-Business Suite和Oracle One-to-One Fulfillment 授权问题漏洞 — One-to-One Fulfillment | 9.1 | Critical | 2021-01-20 |
| CVE-2021-2101 | Oracle E-Business Suite 组件安全漏洞 — One-to-One Fulfillment | 9.1 | Critical | 2021-01-20 |
| CVE-2021-2083 | Oracle E-Business Suite 安全漏洞 — iSupport | 8.2 | High | 2021-01-20 |
| CVE-2021-2084 | Oracle E-Business Suite CRM Technical Foundation 授权问题漏洞 — CRM Technical Foundation | 8.2 | High | 2021-01-20 |
| CVE-2021-2085 | Oracle E-Business Suite 组件访问控制错误漏洞 — CRM Technical Foundation | 8.2 | High | 2021-01-20 |
| CVE-2021-2089 | Oracle E-Business Suite 组件授权问题漏洞 — iStore | 8.2 | High | 2021-01-20 |
| CVE-2021-2090 | Oracle E-Business Suite 组件授权问题漏洞 — Email Center | 8.2 | High | 2021-01-20 |
| CVE-2021-2091 | Oracle E-Business Suite 组件安全漏洞 — Scripting | 8.2 | High | 2021-01-20 |
| CVE-2021-2075 | Oracle Fusion Middleware 安全漏洞 — WebLogic Server | 9.8 | Critical | 2021-01-20 |
| CVE-2021-2077 | Oracle E-Business Suite 授权问题漏洞 — iStore | 8.2 | High | 2021-01-20 |
| CVE-2021-2078 | Oracle Configurator 授权问题漏洞 — Configurator | 8.2 | High | 2021-01-20 |
| CVE-2021-2079 | Oracle Configurator 安全漏洞 — Configurator | 8.2 | High | 2021-01-20 |
| CVE-2021-2080 | Oracle Supply Chain 和 Oracle Configurator 安全漏洞 — Configurator | 8.2 | High | 2021-01-20 |
| CVE-2021-2082 | Oracle E-Business Suite 授权问题漏洞 — iStore | 8.2 | High | 2021-01-20 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24455 条 CVE 漏洞。