Archive

April 2018

Vulnerabilities first published in this month (UTC), newest first.

← March 2018 2018 / April May 2018 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2018-2628 Exploited Public exploit Scanner template EPSS 100%

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …

Oracle WebLogic Server

Apr 19, 2018
KEV Sep 8, 2022
High 7.7

CVE-2018-5430 Exploited Public exploit EPSS 48%

TIBCO JasperReports Server Information Disclosure Vulnerability

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics …

TIBCO Software TIBCO JasperReports Server TIBCO JasperReports Server for ActiveMatrix BPM TIBCO JasperReports Server - Community Edition Ubuntu

Apr 17, 2018
KEV Dec 29, 2022
Critical 9.8

CVE-2018-1273 Exploited · Ransomware Public exploit Scanner template EPSS 97%

Spring Data Commons remote code injection vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can sup…

Spring by Pivotal Spring Framework org.springframework.data:spring-data-commons Maven

Apr 11, 2018
KEV Mar 25, 2022