{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Er zijn kwetsbaarheden verholpen in Oracle Database Server.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n* Denial-of-Service (DoS)\n* Toegang tot gevoelige gegevens\n* Manipulatie van gegevens\n* Omzeilen van beveiligingsmaatregel", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Authorization", "title": "CWE-285" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Uncontrolled Recursion", "title": "CWE-674" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0397" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21098" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21123" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21126" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21174" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21184" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4603" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cpujul2024csaf.json" }, { "category": "external", "summary": "Reference - cveprojectv5; ibm; nvd; oracle", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "title": " Kwetsbaarheden verholpen in Oracle Database Server", "tracking": { "current_release_date": "2024-07-17T13:51:54.185475Z", "id": "NCSC-2024-0291", "initial_release_date": "2024-07-17T13:51:54.185475Z", "revision_history": [ { "date": "2024-07-17T13:51:54.185475Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764785", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764790", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764843", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_-_machine_learning_for_python___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503607", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_core___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764838", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764844", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_data_redaction___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764839", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764845", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_fleet_patching___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764787", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_oml4py___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764846", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_portable_clusterware___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764840", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764847", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_rdbms_security___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764784", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764788", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_recovery_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764841", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764848", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_sqlcl___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764789", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:__database_workload_manager___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764842", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_graalvm_multilingual_engine___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764783", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___19c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-764786", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___21c:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503604", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503605", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_multilingual_engine___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503606", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:_oml4py___23.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-266118", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503896", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205254", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205265", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205230", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909875", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205250", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909872", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909878", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.15:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909879", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.16:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909880", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909876", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220917", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.19:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503891", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816314", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.20:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816313", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.21:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909877", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.22:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503897", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.23:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205268", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205281", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205295", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205216", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909874", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-909873", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:19.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503890", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503893", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.1:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-220916", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.10:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-611586", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.11:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-816312", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.12:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-912081", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.13:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503257", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.14:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503900", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.2:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-205284", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.3:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503898", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503892", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503894", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.6:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503889", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.7:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503895", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.8:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503899", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:21.9:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "database_server", "product": { "name": "database_server", "product_id": "CSAFPID-1503256", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_server:23.4:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-41881", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "other", "text": "Uncontrolled Recursion", "title": "CWE-674" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2022-41881", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-41881.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-266118", "CSAFPID-764783", "CSAFPID-764784", "CSAFPID-764785", "CSAFPID-764786", "CSAFPID-764787", "CSAFPID-764788", "CSAFPID-764789", "CSAFPID-764790", "CSAFPID-764838", "CSAFPID-764839", "CSAFPID-764840", "CSAFPID-764841", "CSAFPID-764842", "CSAFPID-764843", "CSAFPID-764844", "CSAFPID-764845", "CSAFPID-764846", "CSAFPID-764847", "CSAFPID-764848", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2022-41881" }, { "cve": "CVE-2024-0397", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-0397", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0397.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-0397" }, { "cve": "CVE-2024-4603", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-4603", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-4603" }, { "cve": "CVE-2024-21098", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21098", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21098.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21098" }, { "cve": "CVE-2024-21123", "cwe": { "id": "CWE-285", "name": "Improper Authorization" }, "notes": [ { "category": "other", "text": "Improper Authorization", "title": "CWE-285" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21123", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21123.json" } ], "title": "CVE-2024-21123" }, { "cve": "CVE-2024-21126", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21126", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21126.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "baseScore": 5.8, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21126" }, { "cve": "CVE-2024-21174", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21174", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21174.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.1, "baseSeverity": "LOW" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21174" }, { "cve": "CVE-2024-21184", "product_status": { "known_affected": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] }, "references": [ { "category": "self", "summary": "CVE-2024-21184", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21184.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-266118", "CSAFPID-1503604", "CSAFPID-1503605", "CSAFPID-1503606", "CSAFPID-1503607" ] } ], "title": "CVE-2024-21184" } ] }