| Title | Oracle Fusion Middleware の Oracle HTTP Server における Web Listener に関する脆弱性 |
|---|---|
| Summary | "Oracle Fusion Middleware の Oracle HTTP Server には、Web Listener に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。 |
| Possible impacts | 第三者により、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Oct. 20, 2015, midnight |
| Registration Date | Oct. 22, 2015, 2:17 p.m. |
| Last Update | Jan. 28, 2016, 11:58 a.m. |
| CVSS2.0 : 警告 | |
| Score | 5 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| オラクル |
| Oracle HTTP Server 10.1.3.5 |
| Oracle HTTP Server 11.1.1.7 |
| Oracle HTTP Server 11.1.1.9 |
| Oracle HTTP Server 12.1.2.0 |
| Oracle HTTP Server 12.1.3.0 |
| Oracle HTTP Server 10.1.3.5 |
| Oracle HTTP Server 11.1.1.7 |
| Oracle HTTP Server 11.1.1.9 |
| Oracle HTTP Server 12.1.2.0 |
| Oracle HTTP Server 12.1.3.0 |
| 日立 |
| Cosminexus HTTP Server |
| Cosminexus HTTP Server |
| Hitachi Application Server |
| Hitachi Application Server |
| Hitachi Application Server for Developers |
| Hitachi Application Server for Developers |
| Hitachi Web Server |
| Hitachi Web Server - Custom Edition |
| Hitachi Web Server |
| Hitachi Web Server - Custom Edition |
| uCosminexus Application Server |
| uCosminexus Application Server (64) |
| uCosminexus Application Server -R |
| uCosminexus Application Server Express |
| uCosminexus Application Server Standard-R |
| uCosminexus Application Server |
| uCosminexus Application Server (64) |
| uCosminexus Application Server -R |
| uCosminexus Application Server Express |
| uCosminexus Application Server Standard-R |
| uCosminexus Application Server Enterprise |
| uCosminexus Application Server Enterprise |
| uCosminexus Application Server Smart Edition |
| uCosminexus Application Server Smart Edition |
| uCosminexus Application Server Standard |
| uCosminexus Application Server Standard |
| uCosminexus Developer |
| uCosminexus Developer 01 |
| uCosminexus Developer Professional |
| uCosminexus Developer Professional for Plug-in |
| uCosminexus Developer |
| uCosminexus Developer 01 |
| uCosminexus Developer Professional |
| uCosminexus Developer Professional for Plug-in |
| uCosminexus Developer Standard |
| uCosminexus Developer Standard |
| uCosminexus Primary Server Base |
| uCosminexus Primary Server Base(64) |
| uCosminexus Primary Server Base |
| uCosminexus Primary Server Base(64) |
| uCosminexus Service Architect |
| uCosminexus Service Architect |
| uCosminexus Service Platform |
| uCosminexus Service Platform (64) |
| uCosminexus Service Platform - Messaging |
| uCosminexus Service Platform |
| uCosminexus Service Platform (64) |
| uCosminexus Service Platform - Messaging |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2015年10月22日] 掲載 [2016年01月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新 ベンダ情報：日立 (HS16-002) を追加 |
Feb. 17, 2018, 10:37 a.m. |
| 0 | [2015年10月22日] 掲載 [2016年01月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新 ベンダ情報：日立 (HS16-002) を追加 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener. |
|---|---|
| Publication Date | Oct. 22, 2015, 6:59 a.m. |
| Registration Date | Jan. 26, 2021, 2:46 p.m. |
| Last Update | Nov. 21, 2024, 11:26 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:oracle:fusion_middleware:12.1.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:oracle:fusion_middleware:10.1.3.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:oracle:fusion_middleware:11.1.1.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:oracle:fusion_middleware:11.1.1.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:oracle:fusion_middleware:12.1.2.0:*:*:*:*:*:*:* | |||||