CVE-2018-2616

CVE-2018-2616: falha em Oracle Corporation OSS Support Tools

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar OSS Support Tools

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 27%
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in takeover of OSS Support Tools. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Produtos afetados
Oracle Corporation · OSS Support Tools
CVEs relacionadas — Oracle Corporation OSS Support Tools

No mesmo produto, das mais perigosas para as menos.

CVE-2018-2617—CVE-2018-2617EPSS 1.8%CVE-2021-2303MEDIUMCVE-2021-2303EPSS 1.5%CVE-2018-2615—CVE-2018-2615EPSS 1.4%CVE-2022-21405MEDIUMCVE-2022-21405EPSS 0.3%