CVE-2018-3246

5 documents4 sources
Severity
7.5HIGH
EPSS
3.1%
top 13.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Oracle Communications Converged Application ServerOracle Communications Webrtc Session ControllerOracle Corporation Weblogic Server+7 more
Timeline
PublishedOct 17
Latest updateMay 13

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.5 (Con…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages10 packages

▶NVDoracle/weblogic_server12.1.3.0.0, 12.2.1.3, 12.2.1.3.0+2
▶CVEListV5oracle_corporation/weblogic_server12.1.3.0, 12.2.1.3+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hf42-4hj4-cx44: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)↗2022-05-13
▶
CVEList
CVE-2018-3246: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)↗2018-10-17
▶

💬Community

2
Bugzilla
CVE-2017-18198 libcdio: Heap-based buffer over-read in print_iso9660_recurse function in iso-info.c↗2018-02-27
▶
Bugzilla
CVE-2017-18199 libcdio: NULL pointer dereference in realloc_symlink in rock.c↗2018-02-27
▶