7.4

CVE-2018-2966

EPSS 1.19%
Veröffentlicht 18.07.2018 13:29:03
Zuletzt bearbeitet 21.11.2024 04:04:51
Erkennungen
Login

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera Unifier accessible data. CVSS 3.0 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Primavera Unifier Version 16.1

Oracle ≫ Primavera Unifier Version 16.2

Oracle ≫ Primavera Unifier Version 16.2.1.0

Oracle ≫ Primavera Unifier Version 16.2.4.0

Oracle ≫ Primavera Unifier Version 17.1

Oracle ≫ Primavera Unifier Version 17.2

Oracle ≫ Primavera Unifier Version 17.3

Oracle ≫ Primavera Unifier Version 17.4

Oracle ≫ Primavera Unifier Version 17.5

Oracle ≫ Primavera Unifier Version 17.6

Oracle ≫ Primavera Unifier Version 17.7

Oracle ≫ Primavera Unifier Version 17.8

Oracle ≫ Primavera Unifier Version 17.9

Oracle ≫ Primavera Unifier Version 17.10

Oracle ≫ Primavera Unifier Version 17.11

Oracle ≫ Primavera Unifier Version 17.12

Oracle ≫ Primavera Unifier Version 18.1

Oracle ≫ Primavera Unifier Version 18.2

Oracle ≫ Primavera Unifier Version 18.3

Oracle ≫ Primavera Unifier Version 18.4

Oracle ≫ Primavera Unifier Version 18.5

Oracle ≫ Primavera Unifier Version 18.6

Oracle ≫ Primavera Unifier Version 18.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.638

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.4	2.8	4	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Patch

Vendor Advisory

http://www.securityfocus.com/bid/104823

https://nvd.nist.gov/vuln/detail/CVE-2018-2966

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-2966

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-2966

EUVD