Vulnerability record/PUBLISHED/Published Oct 17, 2018 01:00:00 UTC

CVE-2018-3152

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GlassFish Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Base scoreN/A/ 10

SeverityNoneCVSS 3.0

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

Attack vectorNetworkAV

Attack complexityLowAC

Privileges requiredNonePR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactNoneC

Integrity impactNoneI

Availability impactHighA

CVSS vector stringCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityoracle

Last updatedOct 2, 2024 19:42:37 UTC

PublishedOct 17, 2018 01:00:00 UTC

ReservedDec 15, 2017 00:00:00 UTC