7.4

CVE-2018-2637

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.6.0 Updateupdate171
Oracle ≫ Jdk Version1.7.0 Updateupdate161
Oracle ≫ Jdk Version1.8.0 Updateupdate152
Oracle ≫ Jdk Version9.0.1
Oracle ≫ Jre Version1.6.0 Updateupdate171
Oracle ≫ Jre Version1.7.0 Updateupdate161
Oracle ≫ Jre Version1.8.0 Updateupdate152
Oracle ≫ Jre Version9.0.1
Oracle ≫ Jrockit Versionr28.3.16
Redhat ≫ Satellite Version5.6
Redhat ≫ Satellite Version5.7
Redhat ≫ Satellite Version5.8
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version17.10
Hp ≫ Xp Command View SwEditionadvanced Version >= 8.6.2-01
Hp ≫ Xp P9000 Command View SwEditionadvanced Version >= 8.6.2-01
Hp ≫ Xp7 Command View SwEditionadvanced Version >= 8.6.2-01
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.399
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
http://www.securitytracker.com/id/1040203
Third Party Advisory
Broken Link
VDB Entry
https://usn.ubuntu.com/3613-1/
Third Party Advisory
https://usn.ubuntu.com/3614-1/
Third Party Advisory
http://www.securityfocus.com/bid/102576
Third Party Advisory
Broken Link
VDB Entry