Vulnerability in OSS Support Tools by Oracle
CVE-2018-2616

8.8HIGH

Key Information:

Vendor
Oracle
Status
Oss Support Tools
Vendor
CVE Published:
18 January 2018

Summary

A security weakness in the OSS Support Tools component of Oracle Support Tools, specifically in the Diagnostic Assistant subcomponent, allows an attacker with low privileges and network access via HTTP to exploit the system. This vulnerability, present in versions prior to 2.11.33, facilitates unauthorized control over OSS Support Tools, potentially leading to significant security breaches.

Affected Version(s)

OSS Support Tools < 2.11.33

References

http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/102644
vdb-entryx_refsource_BID

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.