CVE-2018-2627

Published: Jan 18, 2018Modified: May 6, 2025

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 6.0

Source: NVD

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

Affected (27)

Products: Oracle: Jdk, Jre · Redhat: Satellite · Netapp: Active Iq Unified Manager, Cloud Backup, E Series Santricity Management Plug Ins, E Series Santricity Os Controller, E Series Santricity Storage Manager, E Series Santricity Web Services, Oncommand Insight, Oncommand Shift, Oncommand Unified Manager, Oncommand Workflow Automation, Plug In For Symantec Netbackup, Santricity Cloud Connector, Snapmanager, Storage Replication Adapter For Clustered Data Ontap, Storagegrid, Vasa Provider For Clustered Data Ontap, Virtual Storage Console

2 products

1 product

17 products

Active Iq Unified Manager

Cloud Backup

E Series Santricity Management Plug Ins

E Series Santricity Os Controller

E Series Santricity Storage Manager

E Series Santricity Web Services

Oncommand Insight

Oncommand Shift

Oncommand Unified Manager

Oncommand Workflow Automation

Plug In For Symantec Netbackup

Santricity Cloud Connector

Snapmanager

Storage Replication Adapter For Clustered Data Ontap

Storagegrid

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.8.0 update152
Oracle Jdk	Version 9.0.1
Oracle Jre	Version 1.8.0 update152
Oracle Jre	Version 9.0.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Satellite	Version 5.8

Configuration C

22 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp Cloud Backup	All versions
Netapp E Series Santricity Management Plug Ins	All versions
Netapp E Series Santricity Os Controller	From 11.0 to 11.70.1
Netapp E Series Santricity Storage Manager	All versions
Netapp E Series Santricity Web Services	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Shift	All versions
Netapp Oncommand Unified Manager	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Plug In For Symantec Netbackup	All versions
Netapp Santricity Cloud Connector	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap	From 7.2
Netapp Storage Replication Adapter For Clustered Data Ontap	From 7.2
Netapp Storagegrid	Up to 9.0.4
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	Version 6.0
Netapp Virtual Storage Console	From 7.2
Netapp Virtual Storage Console	Version 6.0