Not rated
CVE-2018-2616 Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant)
Description
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in takeover of OSS Support Tools. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OSS Support Tools 2.11 | earliest → < 2.11.33 | 2.11.33 |
Other CVEs of OSS Support Tools
The 5 CVEs of OSS Support Tools →
CVE-2022-21405
Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer)
5.5
Medium
CVE-2021-2303
Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant)
4.9
Medium
CVE-2018-2617
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant)
Not rated
CVE-2018-2615
Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant)
Not rated