Vulnerability in Oracle Communications Applications EAGLE LNP Application Processor
CVE-2018-2904

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Communications Eagle Lnp Application Processor
Vendor
CVE Published:
18 July 2018

What is CVE-2018-2904?

A security vulnerability exists in the Oracle Communications EAGLE LNP Application Processor component, impacting version 10.x. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized access, including the ability to update, insert, or delete crucial data stored within the Oracle Communications EAGLE LNP Application Processor, as well as unauthorized visibility into a portion of the accessible data. Organizations using this software are advised to implement appropriate security measures to mitigate potential risks.

Affected Version(s)

Communications EAGLE LNP Application Processor 10.x

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041297
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/104798
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.