CVE-2018-2616
CVE-2018-2616
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 27.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
18 ene 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in takeover of OSS Support Tools. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Productos afectados
Oracle Corporation · OSS Support Tools¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →