5.5

CVE-2018-1288

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ Kafka Version > 0.9.0.0 <= 0.9.0.1
Apache ≫ Kafka Version >= 0.10.0.0 <= 0.10.2.1
Apache ≫ Kafka Version >= 0.11.0.0 <= 0.11.0.2
Apache ≫ Kafka Version1.0.0
Redhat ≫ Jboss Middleware Text-only Advisories Version1.0 SwPlatformmiddleware
Oracle ≫ Database Version11.2.0.4
Oracle ≫ Database Version12.1.0.2
Oracle ≫ Database Version12.2.0.1
Oracle ≫ Database Version18c
Oracle ≫ Database Version19c
Oracle ≫ Primavera P6 Enterprise Project Portfolio Management Version >= 19.12.0.0 <= 19.12.6.0
Oracle ≫ Timesten In-memory Database Version < 18.1.2.1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.67% 0.704
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.4 2.8 2.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
nvd@nist.gov 5.5 8 4.9
AV:N/AC:L/Au:S/C:N/I:P/A:P