CVE-2023-42920
published 2024-03-19CVE-2023-42920: Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.18%
7.6th percentile
Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| claris | filemaker_pro | < 20.2 | 20.2 |
| claris | filemaker_pro | >= unspecified < 20.2 | 20.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_oracle9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fq86-8676-6j38: Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro
ghsa_unreviewed·2024-03-19
CVE-2023-42920 [HIGH] CWE-427 GHSA-fq86-8676-6j38: Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro
Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
Oracle
Oracle Oracle Communications Applications Risk Matrix: Print Preview (Apache Commons BCEL) — CVE-2022-42920
vendor_oracle·2023-10-15·CVSS 9.8
CVE-2022-42920 [CRITICAL] Oracle Oracle Communications Applications Risk Matrix: Print Preview (Apache Commons BCEL) — CVE-2022-42920
Oracle Oracle Communications Applications Risk Matrix: Print Preview (Apache Commons BCEL) vulnerability
CVE: CVE-2022-42920
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2023 (OCT 2023)
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons BCEL) — CVE-2022-42920
vendor_oracle·2023-07-15·CVSS 9.8
CVE-2022-42920 [CRITICAL] Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons BCEL) — CVE-2022-42920
Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons BCEL) vulnerability
CVE: CVE-2022-42920
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2023 (JUL 2023)
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Centralized Third party Jars (Apache Commons BCEL) — CVE-2022-42920
vendor_oracle·2023-01-15·CVSS 9.8
CVE-2022-42920 [CRITICAL] Oracle Oracle Fusion Middleware Risk Matrix: Centralized Third party Jars (Apache Commons BCEL) — CVE-2022-42920
Oracle Oracle Fusion Middleware Risk Matrix: Centralized Third party Jars (Apache Commons BCEL) vulnerability
CVE: CVE-2022-42920
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2023 (JAN 2023)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-19
Published