NetSight
IP …
high7.5

CVE-2018-3246

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).

Impact

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected products

VendorProductAffected versions
OracleBanking Platform
Versions 2.6.0, 2.6.1, 2.6.2
OracleBusiness Process Management Suite
Versions 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0
OracleCommunications Converged Application Server
before 7.0.0.1
OracleCommunications Webrtc Session Controller
before 7.2
OracleEnterprise Repository
Version 12.1.3.0.0
OracleRetail Convenience And Fuel Pos Software
Version 2.8.1
OracleUtilities Network Management System
Versions 1.12.0.3, 2.3.0.0, 2.3.0.1, 2.3.0.2
OracleWebcenter Portal
Versions 11.1.1.9.0, 12.2.1.3.0
OracleWeblogic Server
Versions 12.1.3.0.0, 12.2.1.3, 12.2.1.3.0

References