9 - CVE-2018-2879

Informations
Name	CVE-2018-2879	First vendor Publication	2018-04-18
Vendor	Cve	Last vendor Modification	2024-11-21

Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Overall CVSS Score	9
Base Score	9	Environmental Score	9
impact SubScore	6	Temporal Score	9
Exploitabality Sub Score	2.2

Attack Vector	Network	Attack Complexity	High
Privileges Required	None	User Interaction	None
Scope	Changed	Confidentiality Impact	High
Integrity Impact	High	Availability Impact	High
Calculate full CVSS 3.0 Vectors scores

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. Note: Please refer to Doc ID My Oracle Support Note 2386496.1 for instructions on how to address this issue. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

Type	Description	Count
Application	Oracle Access Manager cpe:2.3:a:oracle:access_manager:12.2.1.3.0:::::::* cpe:2.3:a:oracle:access_manager:11.1.2.3.0:::::::*	2

Date	Description
2018-06-07	Oracle Access Manager authentication bypass attempt RuleID : 46605 - Revision : 2 - Type : SERVER-ORACLE

Source	Url

If you want to see full details history, please login or register.