Oracle Database Server Application Express Vulnerability
CVE-2018-2699

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Application Express
Vendor
CVE Published:
18 January 2018

What is CVE-2018-2699?

An unauthenticated attacker can exploit a weakness in the Application Express component of Oracle Database Server to achieve unauthorized access. This vulnerability allows the attacker to compromise Application Express with network access through HTTP. Although the vulnerability is contained within Application Express, successful exploitation can lead to significant consequences for other connected products. Attackers may gain unauthorized ability to read, update, insert, or delete data that is accessible through Application Express, especially requiring human interaction from a third party to trigger the attack.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Application Express < 5.1.4.00.08

References

http://www.securityfocus.com/bid/102563
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuja...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1040196
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.