CVE-2018-3252

CVE-2018-3252: vulnerability in Oracle Corporation WebLogic Server

Published 17 Oct 2018 · Updated 02 Oct 2024

Follow this CVE + Monitor WebLogic Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 30%

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Oracle Corporation · WebLogic Server

Related CVEs — Oracle Corporation WebLogic Server

In the same product, most dangerous first.

CVE-2020-14882CRITICALCVE-2020-14882EPSS 100.0%KEV CVE-2017-10271HIGHCVE-2017-10271EPSS 100.0%KEV CVE-2018-2628CRITICALCVE-2018-2628EPSS 100.0%KEV CVE-2023-21839HIGHCVE-2023-21839EPSS 99.9%KEV CVE-2020-14750CRITICALCVE-2020-14750EPSS 99.2%KEV CVE-2020-14883HIGHCVE-2020-14883EPSS 97.7%KEV

References

https://security.gentoo.org/glsa/201908-24 http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securityfocus.com/bid/105613 http://www.securitytracker.com/id/1041896