Skip to content
OpenAdvisories
Unscored CVE-2018-3259 EUVD-2018-15113GHSA-vmj6-8wqf-54hv

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and…

Published Oct 17, 2018 · Updated Oct 2, 2024 · Assigned by oracle

Description

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Oracle Database 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c —

References