CVE-2018-2765
published 2018-04-19CVE-2018-2765: Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are…
PriorityP350high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
3.44%
87.7th percentile
Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | security_service | — | — |
| oracle | security_service | — | — |
| oracle | security_service | — | — |
| oracle | security_service | — | — |
| oracle_corporation | database_enterprise_edition | — | — |
| oracle_corporation | database_enterprise_edition | — | — |
| oracle_corporation | database_enterprise_edition | — | — |
| oracle_corporation | security_service | — | — |
| oracle_corporation | security_service | — | — |
| oracle_corporation | security_service | — | — |
| oracle_corporation | security_service | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_oracle7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7wc4-63m9-f7j6: Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API)
ghsa_unreviewed·2022-05-13
CVE-2018-2765 [HIGH] GHSA-7wc4-63m9-f7j6: Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API)
Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Oracle
Oracle Oracle Database Server Risk Matrix: Oracle SSL API — CVE-2018-2765
vendor_oracle·2020-10-15·CVSS 7.5
CVE-2018-2765 [HIGH] Oracle Oracle Database Server Risk Matrix: Oracle SSL API — CVE-2018-2765
Oracle Oracle Database Server Risk Matrix: Oracle SSL API vulnerability
CVE: CVE-2018-2765
CVSS: 7.5
Protocol: HTTPS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2020 (OCT 2020)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlhttp://www.securityfocus.com/bid/103808http://www.securitytracker.com/id/1040695https://www.oracle.com/security-alerts/cpuoct2020.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlhttp://www.securityfocus.com/bid/103808http://www.securitytracker.com/id/1040695https://www.oracle.com/security-alerts/cpuoct2020.html
2018-04-19
Published