CVE-2018-3246

Published: Oct 17, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected (19)

Products: Oracle: Banking Platform, Business Process Management Suite, Communications Converged Application Server, Communications Webrtc Session Controller, Enterprise Repository, Retail Convenience And Fuel Pos Software, Utilities Network Management System, Webcenter Portal, Weblogic Server

Oracle

9 products

Banking Platform

Business Process Management Suite

Communications Converged Application Server

Communications Webrtc Session Controller

Enterprise Repository

Retail Convenience And Fuel Pos Software

Utilities Network Management System

Webcenter Portal

Weblogic Server

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Oracle Banking Platform	Version 2.6.0
Oracle Banking Platform	Version 2.6.1
Oracle Banking Platform	Version 2.6.2
Oracle Business Process Management Suite	Version 11.1.1.9.0
Oracle Business Process Management Suite	Version 12.1.3.0.0
Oracle Business Process Management Suite	Version 12.2.1.3.0
Oracle Communications Converged Application Server	Before 7.0.0.1
Oracle Communications Webrtc Session Controller	Before 7.2
Oracle Enterprise Repository	Version 12.1.3.0.0
Oracle Retail Convenience And Fuel Pos Software	Version 2.8.1
Oracle Utilities Network Management System	Version 1.12.0.3
Oracle Utilities Network Management System	Version 2.3.0.0
Oracle Utilities Network Management System	Version 2.3.0.1
Oracle Utilities Network Management System	Version 2.3.0.2
Oracle Webcenter Portal	Version 11.1.1.9.0
Oracle Webcenter Portal	Version 12.2.1.3.0
Oracle Weblogic Server	Version 12.1.3.0.0
Oracle Weblogic Server	Version 12.2.1.3.0
Oracle Weblogic Server	Version 12.2.1.3