CVE Feed

    Dashboard / CVE / CVE-2018-2627

    CVE-2018-2627

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to the Windows installer only. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).

    Published:Jan 16, 2018
    Last Modified:May 6, 2025
    EPS:Jan 18, 2018
    EPSS Score:0.00373
    CVSS Score:7.5

    Affected Products

    Vendor
    Netapp
    Product
    Active Iq Unified Manager
    Vendor
    Netapp
    Product
    Cloud Backup
    Vendor
    Netapp
    Product
    E-series Santricity Management Plug-ins
    Vendor
    Netapp
    Product
    E-series Santricity Os Controller
    Vendor
    Netapp
    Product
    E-series Santricity Storage Manager
    Vendor
    Netapp
    Product
    E-series Santricity Web Services
    Vendor
    Netapp
    Product
    Oncommand Insight
    Vendor
    Netapp
    Product
    Oncommand Shift
    Vendor
    Netapp
    Product
    Oncommand Unified Manager
    Vendor
    Netapp
    Product
    Oncommand Workflow Automation
    Vendor
    Netapp
    Product
    Plug-in For Symantec Netbackup
    Vendor
    Netapp
    Product
    Santricity Cloud Connector
    Vendor
    Netapp
    Product
    Snapmanager
    Vendor
    Netapp
    Product
    Storage Replication Adapter For Clustered Data Ontap
    Vendor
    Netapp
    Product
    Storagegrid
    Vendor
    Netapp
    Product
    Vasa Provider For Clustered Data Ontap
    Vendor
    Netapp
    Product
    Virtual Storage Console
    Vendor
    Oracle
    Product
    Jdk
    Vendor
    Oracle
    Product
    Jre
    Vendor
    Redhat
    Product
    Network Satellite
    Vendor
    Redhat
    Product
    Rhel Extras Oracle Java
    Vendor
    Redhat
    Product
    Satellite

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-30722 (CVSS 5.3) — Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions …
    CVE-2025-31672 (CVSS 5.3) — Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files lik…
    CVE-2025-24928 (CVSS 7.8) — libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in va…
    CVE-2024-56171 (CVSS 7.8) — libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSche…
    CVE-2025-26465 (CVSS 6.8) — A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle atta…
    CVE-2025-1181 (CVSS 2.3) — A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function…
    CVE-2025-1178 (CVSS 6.3) — A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerab…
    CVE-2025-24970 (CVSS 7.5) — Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.…
    CVE-2025-0411 (CVSS 7) — 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-t…
    CVE-2025-21492 (CVSS 4.9) — Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions …

    References

    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
    http://www.securityfocus.com/bid/102584
    http://www.securitytracker.com/id/1040203
    https://access.redhat.com/errata/RHSA-2018:0099
    https://access.redhat.com/errata/RHSA-2018:1463
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://security.netapp.com/advisory/ntap-20180117-0001/
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
    http://www.securityfocus.com/bid/102584
    http://www.securitytracker.com/id/1040203
    https://access.redhat.com/errata/RHSA-2018:0099
    https://access.redhat.com/errata/RHSA-2018:1463
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://security.netapp.com/advisory/ntap-20180117-0001/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High