CVE-2011-2273
Estado: ModificadaMedia (4)—
Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
- Puntuación base: 4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.24%
- Percentil entre todas las CVEs puntuadas: 68
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- http://www.securitytracker.com/id?1025802
- http://www.us-cert.gov/cas/techalerts/TA11-201A.html
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- http://www.securitytracker.com/id?1025802
- http://www.us-cert.gov/cas/techalerts/TA11-201A.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-2273",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert_us@oracle.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-07-21T00:55:01.130",
"references": [
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securitytracker.com/id?1025802",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA11-201A.html",
"tags": [
"US Government Resource"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1025802",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA11-201A.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Agile Core Technology component in Oracle Supply Chain Products Suite 9.3.0.3 and 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Search."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el componente Agile Core Technology en Oracle Supply Chain Products Suite v9.3.0.3 y v9.3.1.1 permite a usuarios remotos autenticados comprometer la confidencialidad a través de vectores desconocidos relacionados con Search."
}
],
"lastModified": "2026-06-16T23:31:01.643",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:supply_chain_products_suite:9.3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07E6BDF6-3AAE-4038-A288-1033DA84ACF7"
},
{
"criteria": "cpe:2.3:a:oracle:supply_chain_products_suite:9.3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "909AAF35-171E-48C5-B175-040C979871B2"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert_us@oracle.com"
}