____________________________________________________________________________________________________
clearskysec.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
3 CVEs- CVE-2019-3396Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityAtlassian · Confluence Server and Data ServerKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1202Indirect Command Execution+1 more · 1 report99.9%Top 0.03%83.7priority
- CVE-2019-11581Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityAtlassian · Jira Server and Data CenterKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report84.6%Top 0.3%73.7priority
- CVE-2012-3152Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report98.8%Top 0.07%73.2priority
Where it names them
CVE-2019-3396 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
Server CVE-2019-3396
Atlassian Confluence Server (CVE-2019-3396)
CVE-2019-11581 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2019-11581
Atlassian Jira Server or Data Center (CVE-2019-11581)
CVE-2012-3152 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
Server CVE-2019-3396 Tactic: Initial Access ID: TA0001 Technique: Exploit Public-Facing Application ID: T1190 Tactic: Collection ID: TA0009 Technique: Data from Information Repositories: Confluence ID: T1213.001 - Atlassian Jira Server or Data Center CVE-2019-11581 - Oracle 10g 11.1.2.0 CVE-2012-3152
Oracle 10g 11.1.2.0 (CVE-2012-3152)
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.