CVE Feed

    Dashboard / CVE / CVE-2018-2943

    CVE-2018-2943

    Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware MapViewer. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    Published:Jul 18, 2018
    Last Modified:Nov 21, 2024
    EPS:Jul 18, 2018
    EPSS Score:0.02487
    CVSS Score:9.8

    Affected Products

    Vendor
    Oracle
    Product
    Fusion Middleware Mapviewer

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-29425 (CVSS 4.8) — In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input strin…
    CVE-2020-11987 (CVSS 8.2) — Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the Nod…
    CVE-2020-14608 (CVSS 8.2) — Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile S…
    CVE-2020-14607 (CVSS 6.1) — Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile S…
    CVE-2019-17566 (CVSS 7.5) — Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:h…
    CVE-2019-10219 (CVSS 6.1) — A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize…
    CVE-2019-13990 (CVSS 9.8) — initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows …
    CVE-2019-11358 (CVSS 6.1) — jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, .…
    CVE-2018-8013 (CVSS 9.8) — In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string f…
    CVE-2017-3230 (CVSS 8.6) — Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: M…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High