通告编号:NS-2023-0043
| TAG： | Oracle、关键补丁更新、Weblogic |
| 漏洞危害： | 此次补丁更新修复了387个不同程度的漏洞，涉及多个常用产品。 |
| 版本： | 1.0 |
漏洞概述
2023年10月18日，绿盟科技CERT监测发现Oracle官方发布了10月重要补丁更新公告CPU（Critical Patch Update），此次共修复了387个不同程度的漏洞，此次安全更新涉及Oracle WebLogic Server、Oracle MySQL、Oracle Financial Services Applications、Oracle Enterprise Manager、Oracle Retail Applications等多个常用产品。Oracle强烈建议客户尽快应用关键补丁更新修复程序，对漏洞进行修复。
参考链接：
https://www.oracle.com/security-alerts/cpuoct2023.html
SEE MORE →
2重点漏洞简述
根据产品流行度和漏洞重要性筛选出此次更新中包含影响较大的漏洞，请相关用户重点进行关注：
Oracle WebLogic Server多个严重漏洞：
本次安全更新修复了Oracle WebLogic Server存在的多个漏洞，未经身份验证的远程攻击者通过T3、IIOP协议发送恶意请求进行访问，成功利用该漏洞后可导致接管Oracle WebLogic Server权限。
CVE-2023-22069
CVE-2023-22072
CVE-2023-22089
CVE-2023-22101
Oracle MySQL多个漏洞：
此次安全更新针对Oracle MySQL发布了37个安全补丁, 其中9个漏洞在未经用户身份验证的情况下远程进行利用，即无需用户凭据即可通过网络利用。高危漏洞编号如下：
CVE-2023-34034
CVE-2022-42898
CVE-2023-22102
Oracle Financial Services Applications多个漏洞：
此次安全更新针对Oracle Financial Services Applications发布了103个安全补丁。其中的49个漏洞在未经用户身份验证的情况下即可远程进行利用。高危漏洞编号如下：
CVE-2023-22946
CVE-2022-1471
CVE-2023-20873
Oracle Communications多个漏洞：
此次安全更新针对Oracle Communications发布了91个安全补丁，其中的60个漏洞在未经用户身份验证的情况下即可远程进行利用。高危漏洞编号如下：
CVE-2023-34034
CVE-2023-38408
CVE-2023-3824
CVE-2023-38408
Oracle Communications Applications多个漏洞：
此次安全更新针对Oracle Communications Applications发布了9个安全补丁。其中的4个漏洞在未经用户身份验证的情况下即可远程进行利用。高危漏洞如下：
CVE-2022-42920
CVE-2023-34981
Oracle Enterprise Manager多个漏洞：
此次安全更新针对Oracle Enterprise Manager发布了5个安全补丁。其中暂无漏洞在未经用户身份验证的情况下即可远程进行利用。高危漏洞编号如下：
CVE-2023-23914
Oracle Retail Applications多个漏洞：
此次安全更新针对Oracle Retail Applications发布了15个安全补丁。其中有9个漏洞在未经用户身份验证的情况下即可远程进行利用。高危漏洞编号如下：
CVE-2023-39017
Oracle官方10月关键补丁更新漏洞总结如下：
产品 | 漏洞个数 | 未授权远程利用的个数 | 最高CVSS评分 |
Oracle Database Products Risk Matrices | 10 | 2 | 6.5 |
Oracle Database Server | 10 | 2 | 6.5 |
Oracle Big Data Spatial and Graph | 1 | 1 | 6.5 |
Oracle Essbase | 1 | 1 | 6.5 |
Oracle Global Lifecycle Management | 6 | 3 | 7.5 |
Oracle GoldenGate | 6 | 3 | 7.5 |
Oracle Graph Server and Client | 1 | 1 | 5.3 |
Oracle REST Data Services | 1 | 1 | 5.3 |
Oracle Secure Backup | 1 | 0 | 7.5 |
Oracle TimesTen In-Memory Database | 1 | 0 | 5.3 |
Oracle Commerce | 6 | 5 | 7.5 |
Oracle Communications Applications | 9 | 4 | 9.8 |
Oracle Communications | 91 | 60 | 9.8 |
Oracle Construction and Engineering | 4 | 1 | 7.5 |
Oracle E-Business Suite | 4 | 3 | 6.5 |
Oracle Enterprise Manager | 5 | 5 | 9.1 |
Oracle Financial Services Applications | 103 | 49 | 9.9 |
Oracle Fusion Middleware | 46 | 35 | 9.8 |
Oracle Analytics | 16 | 11 | 9.9 |
Oracle Health Sciences Applications | 2 | 2 | 8.1 |
Oracle HealthCare Applications | 1 | 0 | 6.5 |
Oracle Hospitality Applications | 2 | 0 | 8.8 |
Oracle Hyperion | 2 | 1 | 9.8 |
Oracle Insurance Applications | 1 | 1 | 9.8 |
Oracle Java SE | 5 | 5 | 7.5 |
Oracle JD Edwards | 1 | 1 | 5.3 |
Oracle MySQL | 37 | 9 | 9.8 |
Oracle PeopleSoft | 5 | 3 | 9.8 |
Oracle Retail Applications | 15 | 9 | 9.8 |
Oracle Siebel CRM | 2 | 2 | 7.5 |
Oracle Supply Chain | 1 | 1 | 7.5 |
Oracle Systems | 3 | 2 | 5.9 |
Oracle Utilities Applications | 3 | 2 | 9.8 |
Oracle Virtualization | 3 | 0 | 7.9 |
3漏洞防护
3.1 补丁更新
请用户参考本文附录“受影响产品及补丁信息”及时下载受影响产品更新补丁，并参照补丁安装包中的readme文件进行安装更新，以保证长期有效的防护。
注：Oracle官方补丁需要用户持有正版软件的许可账号，使用该账号登陆https://support.oracle.com后，可以下载最新补丁。
3.2 Weblogic临时防护措施
3.2.1 限制T3协议访问
若相关用户暂时无法安装补丁或不通过T3协议进行JVM通信，可使用下列措施阻断针对利用T3协议漏洞的攻击：
WebLogic Server提供了名为 weblogic.security.net.ConnectionFilterImpl 的默认连接筛选器，此连接筛选器接受所有传入连接，可通过此连接筛选器配置规则，对T3及T3s协议进行访问控制，详细操作步骤如下：
1. 进入WebLogic控制台，在base_domain的配置页面中，进入“安全”选项卡页面，点击“筛选器”，进入连接筛选器配置。
2. 在连接筛选器中输入：weblogic.security.net.ConnectionFilterImpl，参考以下写法，在连接筛选器规则中配置符合企业实际情况的规则：
127.0.0.1 * * allow t3 t3s
本机IP ** allow t3 t3s
允许访问的IP * * allow t3 t3s
* * * deny t3 t3s
连接筛选器规则格式如下：target localAddress localPort action protocols，其中：
target 指定一个或多个要筛选的服务器。
localAddress 可定义服务器的主机地址。(如果指定为一个星号 (*)，则返回的匹配结果将是所有本地 IP 地址。)
localPort 定义服务器正在监听的端口。(如果指定了星号，则匹配返回的结果将是服务器上所有可用的端口)。
action 指定要执行的操作。(值必须为“allow”或“deny”。)
protocols 是要进行匹配的协议名列表。(必须指定下列其中一个协议：http、https、t3、t3s、giop、giops、dcom 或 ftp。) 如果未定义协议，则所有协议都将与一个规则匹配。
3. 保存后若规则未生效，建议重新启动WebLogic服务（重启WebLogic服务会导致业务中断，建议相关人员评估风险后，再进行操作）。以Windows环境为例，重启服务的步骤如下：
进入域所在目录下的bin目录，在Windows系统中运行stopWebLogic.cmd文件终止WebLogic服务，Linux系统中则运行stopWebLogic.sh文件。
待终止脚本执行完成后，再运行startWebLogic.cmd或startWebLogic.sh文件启动WebLogic，即可完成WebLogic服务重启。
参考链接：
https://docs.oracle.com/cd/E24329_01/web.1211/e24485/con_filtr.htm#SCPRG377
3.2.2 禁用IIOP协议
用户可通过关闭IIOP协议阻断针对利用IIOP协议漏洞的攻击，操作如下：
在WebLogic控制台中，选择“服务”->“AdminServer”->“协议”，取消“启用IIOP”的勾选。并重启WebLogic项目，使配置生效。
附录受影响产品及补丁信息
受影响产品及版本号 | 可用补丁 |
BI Publisher, versions 6.4.0.0.0, 7.0.0.0.0, 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978488.2 |
GoldenGate Big Data, versions 21.3-21.10 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
GoldenGate Veridata, versions 12.2.1.4.0-12.2.1.4.230922 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Hospitality OPERA 5 Property Services, version 5.6 | https://support.oracle.com/rs?type=doc&id=2978137.1 |
JD Edwards EnterpriseOne Tools, version 9.2.7 | https://support.oracle.com/rs?type=doc&id=2978445.1 |
Management Cloud Engine, version 23.1.0.0 | https://support.oracle.com/rs?type=doc&id=2978834.1 |
MySQL Cluster, versions 8.0.34 and prior, 8.1.0 | https://support.oracle.com/rs?type=doc&id=2977667.1 |
MySQL Connectors, versions 8.1.0 and prior | https://support.oracle.com/rs?type=doc&id=2977667.1 |
MySQL Enterprise Monitor, versions 8.0.35 and prior | https://support.oracle.com/rs?type=doc&id=2977667.1 |
MySQL Installer, versions prior to 1.6.8 | https://support.oracle.com/rs?type=doc&id=2977667.1 |
MySQL Server, versions 5.7.43 and prior, 8.0.34 and prior, 8.1.0 and prior | https://support.oracle.com/rs?type=doc&id=2977667.1 |
MySQL Shell, versions 8.1.1 and prior | https://support.oracle.com/rs?type=doc&id=2977667.1 |
Oracle Access Manager, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Agile PLM, version 9.3.6 | https://support.oracle.com/rs?type=doc&id=2978427.1 |
Oracle Application Testing Suite, version 13.3.0.1 | https://support.oracle.com/rs?type=doc&id=2966414.1 |
Oracle Banking APIs, versions 18.3, 19.1, 19.2, 21.1, 22.1, 22.2 | https://support.oracle.com |
Oracle Banking Branch, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Cash Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Corporate Lending, versions 14.0-14.3, 14.5-14.7 | https://support.oracle.com |
Oracle Banking Corporate Lending Process Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Credit Facilities Process Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Deposits and Lines of Credit Servicing, versions 2.7, 2.12 | https://support.oracle.com |
Oracle Banking Digital Experience, versions 18.3, 19.1, 19.2, 21.1, 22.1, 22.2 | https://support.oracle.com |
Oracle Banking Electronic Data Exchange for Corporates, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Liquidity Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Loans Servicing, version 2.12 | https://support.oracle.com/rs?type=doc&id=2978283.1 |
Oracle Banking Origination, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Party Management, version 2.7 | https://support.oracle.com/rs?type=doc&id=2978283.1 |
Oracle Banking Payments, versions 14.0-14.3, 14.5-14.7 | https://support.oracle.com |
Oracle Banking Platform, versions 2.6.2, 2.9.0 | https://support.oracle.com/rs?type=doc&id=2978283.1 |
Oracle Banking Supply Chain Finance, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Trade Finance, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Trade Finance Process Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Banking Virtual Account Management, versions 14.5-14.7 | https://support.oracle.com |
Oracle Big Data Spatial and Graph, versions 2.5 and prior | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Business Intelligence Enterprise Edition, versions 6.4.0.0.0, 7.0.0.0.0, 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978488.2 |
Oracle Business Process Management Suite, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Coherence, versions 12.2.1.4.0, 14.1.1.0.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Commerce Guided Search, version 11.3.2 | https://support.oracle.com/rs?type=doc&id=2978523.1 |
Oracle Communications BRM - Elastic Charging Engine, versions 12.0.0.4-12.0.0.8 | https://support.oracle.com/rs?type=doc&id=2977044.1 |
Oracle Communications Cloud Native Core Binding Support Function, versions 23.1.0-23.1.8, 23.2.0-23.2.4 | https://support.oracle.com/rs?type=doc&id=2978795.1 |
Oracle Communications Cloud Native Core Console, versions 23.1.1, 23.1.2, 23.2.1 | https://support.oracle.com/rs?type=doc&id=2978796.1 |
Oracle Communications Cloud Native Core Network Exposure Function, versions 23.1.3, 23.3.0 | https://support.oracle.com/rs?type=doc&id=2978797.1 |
Oracle Communications Cloud Native Core Network Function Cloud Native Environment, versions 23.2.0, 23.2.2 | https://support.oracle.com/rs?type=doc&id=2978838.1 |
Oracle Communications Cloud Native Core Network Repository Function, versions 23.1.3, 23.2.1, 23.3.0 | https://support.oracle.com/rs?type=doc&id=2978839.1 |
Oracle Communications Cloud Native Core Policy, versions 23.1.0-23.1.8, 23.2.0-23.2.4 | https://support.oracle.com/rs?type=doc&id=2978840.1 |
Oracle Communications Cloud Native Core Security Edge Protection Proxy, versions 23.1.0, 23.1.3, 23.3.0 | https://support.oracle.com/rs?type=doc&id=2978841.1 |
Oracle Communications Cloud Native Core Unified Data Repository, version 23.1.2 | https://support.oracle.com/rs?type=doc&id=2978842.1 |
Oracle Communications Convergent Charging Controller, version 12.0.6.0 | https://support.oracle.com/rs?type=doc&id=2977046.1 |
Oracle Communications Diameter Signaling Router, versions 8.6.0.0, 9.0.0.0 | https://support.oracle.com/rs?type=doc&id=2978843.1 |
Oracle Communications Element Manager, versions 9.0.0-9.0.2 | https://support.oracle.com/rs?type=doc&id=2978844.1 |
Oracle Communications IP Service Activator, versions 7.4.0, 7.5.0 | https://support.oracle.com/rs?type=doc&id=2977035.1 |
Oracle Communications MetaSolv Solution, version 6.3.1.0.0 | https://support.oracle.com/rs?type=doc&id=2977034.1 |
Oracle Communications Network Analytics Data Director, version 23.2.0 | https://support.oracle.com/rs?type=doc&id=2978845.1 |
Oracle Communications Network Charging and Control, version 12.0.6.0 | https://support.oracle.com/rs?type=doc&id=2977046.1 |
Oracle Communications Order and Service Management, versions 7.4.0, 7.4.1 | https://support.oracle.com/rs?type=doc&id=2977045.1 |
Oracle Communications Policy Management, version 12.6.0.0 | https://support.oracle.com/rs?type=doc&id=2979749.1 |
Oracle Communications Session Report Manager, versions 9.0.0-9.0.2 | https://support.oracle.com/rs?type=doc&id=2978836.1 |
Oracle Communications Unified Assurance, versions 5.5.0-5.5.17, 6.0.0-6.0.3 | https://support.oracle.com/rs?type=doc&id=2977047.1 |
Oracle Communications WebRTC Session Controller, versions 7.2.0.0.0, 7.2.1.0.0 | https://support.oracle.com/rs?type=doc&id=2979750.1 |
Oracle Data Integrator, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Database Server, versions 19.3-19.20, 21.3-21.11 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Documaker, versions 12.6.4-12.7.1 | https://support.oracle.com/rs?type=doc&id=2979125.1 |
Oracle E-Business Suite, versions 12.2.3-12.2.12, [ECC] 8, [ECC] 9, [ECC] 10 | https://support.oracle.com/rs?type=doc&id=2484000.1 |
Oracle Enterprise Communications Broker, versions 3.3, 4.0, 4.1 | https://support.oracle.com/rs?type=doc&id=2978214.1 |
Oracle Enterprise Data Quality, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Enterprise Manager Base Platform, version 13.5.0.0 | https://support.oracle.com/rs?type=doc&id=2966414.1 |
Oracle Enterprise Manager for Peoplesoft, version 13.5.1.1 | https://support.oracle.com/rs?type=doc&id=2966414.1 |
Oracle Enterprise Manager Ops Center, version 12.4.0.0 | https://support.oracle.com/rs?type=doc&id=2966414.1 |
Oracle Enterprise Operations Monitor, versions 5.0, 5.1 | https://support.oracle.com/rs?type=doc&id=2978837.1 |
Oracle Enterprise Session Border Controller, versions 9.0-9.2 | https://support.oracle.com/rs?type=doc&id=2978230.1 |
Oracle Essbase, version 21.5.0.0.0 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Financial Services Cash Flow Engine, version 8.1.2.0.0 | https://support.oracle.com |
Oracle Financial Services Model Management and Governance, versions 8.1.2.3, 8.1.2.4 | https://support.oracle.com/rs?type=doc&id=2979139.1 |
Oracle FLEXCUBE Core Banking, versions 11.6-11.8, 11.10, 11.11 | https://support.oracle.com |
Oracle FLEXCUBE Enterprise Limits and Collateral Management, versions 12.3, 12.4, 14.0-14.3, 14.5-14.7 | https://support.oracle.com |
Oracle FLEXCUBE Universal Banking, versions 12.3, 12.4, 14.0-14.3, 14.5-14.7 | https://support.oracle.com |
Oracle Fusion Middleware MapViewer, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Global Lifecycle Management OPatch, versions prior to 12.2.0.1.40 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle GoldenGate Studio, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle GraalVM for JDK, versions 17.0.8, 20.0.2 | https://support.oracle.com/rs?type=doc&id=2978178.1 |
Oracle Graph Server and Client, versions 22.4.4 and prior | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Healthcare Master Person Index, versions 5.0.0-5.0.6 | https://support.oracle.com/rs?type=doc&id=2978691.1 |
Oracle HTTP Server, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Hyperion Infrastructure Technology, version 11.2.14.0.0 | https://support.oracle.com/rs?type=doc&id=2775466.2 |
Oracle Identity Manager, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Java SE, versions 8u381, 8u381-perf, 11.0.20, 17.0.8, 20.0.2 | https://support.oracle.com/rs?type=doc&id=2978178.1 |
Oracle Life Sciences InForm, version 7.0.0.0 | https://support.oracle.com/rs?type=doc&id=2959737.1 |
Oracle Life Sciences InForm Publisher, version 6.3.1.0 | https://support.oracle.com/rs?type=doc&id=2959737.1 |
Oracle Managed File Transfer, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Middleware Common Libraries and Tools, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Outside In Technology, version 8.5.6 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle REST Data Services, versions prior to 23.2.2 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Retail Bulk Data Integration, versions 16.0.3, 19.0.1 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Customer Management and Segmentation Foundation, versions 18.0.0.13, 19.0.0.7 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail EFTLink, versions 20.0.1, 21.0.0, 22.0.0 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Financial Integration, versions 14.1.3.2, 15.0.3.1, 16.0.3, 19.0.1 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Fiscal Management, version 14.2 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Integration Bus, versions 14.1.3.2, 15.0.3.1, 16.0.3, 19.0.1 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Merchandising System, version 19.0.1 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Service Backbone, versions 14.1.3.2, 15.0.3.1, 16.0.3, 19.0.1 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle Retail Xstore Point of Service, versions 18.0.5, 19.0.4, 20.0.3, 21.0.2, 22.0.0 | https://support.oracle.com/rs?type=doc&id=2975532.1 |
Oracle SD-WAN Edge, versions 9.1.1.5.0, 9.1.1.6.0 | https://support.oracle.com/rs?type=doc&id=2978846.1 |
Oracle Secure Backup, versions 18.1.0.1.0, 18.1.0.2.0 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
Oracle Service Bus, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle SOA Suite, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Solaris, versions 10, 11 | https://support.oracle.com/rs?type=doc&id=2978317.1 |
Oracle Unified Directory, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle Utilities Application Framework, versions 4.2.0.3.0, 4.3.0.1.0-4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0, 4.4.0.3.0, 4.5.0.0.0, 4.5.0.0.1, 4.5.0.1.0-4.5.0.1.2 | https://support.oracle.com/rs?type=doc&id=2977174.1 |
Oracle Utilities Network Management System, versions 2.3.0.2, 2.4.0.1 | https://support.oracle.com/rs?type=doc&id=2977174.1 |
Oracle VM VirtualBox, versions prior to 7.0.12 | https://support.oracle.com/rs?type=doc&id=2978250.1 |
Oracle WebCenter Content, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle WebCenter Portal, version 12.2.1.4.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
Oracle WebLogic Server, versions 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 | https://support.oracle.com/rs?type=doc&id=2978467.2 |
PeopleSoft Enterprise CC Common Application Objects, version 9.2 | https://support.oracle.com/rs?type=doc&id=2978441.1 |
PeopleSoft Enterprise HCM Global Payroll Switzerland, version 9.2 | https://support.oracle.com/rs?type=doc&id=2978441.1 |
PeopleSoft Enterprise PeopleTools, versions 8.59, 8.60 | https://support.oracle.com/rs?type=doc&id=2978441.1 |
Primavera Gateway, versions 19.12.0-19.12.17, 20.12.0-20.12.12, 21.12.0-21.12.10 | https://support.oracle.com/rs?type=doc&id=2978463.1 |
Primavera Unifier, versions 19.12.0-19.12.16, 20.12.0-20.12.16, 21.12.0-21.12.16, 22.12.0-22.12.9 | https://support.oracle.com/rs?type=doc&id=2978463.1 |
Siebel Applications, versions 23.8 and prior | https://support.oracle.com/rs?type=doc&id=2978442.1 |
Sun ZFS Storage Appliance, version 8.8.60 | https://support.oracle.com/rs?type=doc&id=2978317.1 |
TimesTen In-Memory Database, versions prior to 18.1.4.38.0, prior to 18.1.4.39.0, prior to 22.1.1.18.0 | https://support.oracle.com/rs?type=doc&id=2966413.1 |
END
本安全公告仅用来描述可能存在的安全问题，绿盟科技不为此安全公告提供任何保证或承诺。由于传播、利用此安全公告所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，绿盟科技以及安全公告作者不为此承担任何责任。
绿盟科技拥有对此安全公告的修改和解释权。如欲转载或传播此安全公告，必须保证此安全公告的完整性，包括版权声明等全部内容。未经绿盟科技允许，不得任意修改或者增减此安全公告内容，不得以任何方式将其用于商业目的。
如有侵权请联系:admin#unsafe.sh